PT-2023-25661 · Opswat · Opswat Metadefender Kiosk

CVE-2023-36658

·

Published

2023-09-14

·

Updated

2023-10-03

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions OPSWAT MetaDefender KIOSK version 4.6.1.9996
Description An issue was discovered in OPSWAT MetaDefender KIOSK. It has an unquoted service path that can be abused locally.
Recommendations For OPSWAT MetaDefender KIOSK version 4.6.1.9996, consider updating to a newer version that addresses the unquoted service path issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2023-36658

Affected Products

Opswat Metadefender Kiosk