CVE-2023-36650

Name of the Vulnerable Software and Affected Versions ProLion CryptoSpike version 3.0.15P2

Description A missing integrity check in the update system allows attackers to execute OS commands as the root Linux user on the host system via forged update packages.

Recommendations For ProLion CryptoSpike version 3.0.15P2, consider disabling the update system until a patch is available to prevent exploitation. Restrict access to the host system to minimize the risk of attackers executing OS commands as the root Linux user. At the moment, there is no information about a newer version that contains a fix for this vulnerability.