CVE-2023-40252

27th percentile - higher than 27% of all known CVEs

CVE-2023-40252 describes an improper control of code generation ('code injection') vulnerability in Genians Genian NAC and Genians ZTNA, allowing for the replacement of trusted executables. This affects versions from V4.0.0 to V4.0.155 for Genian NAC V4.0, from V5.0.0 to V5.0.42 for Genian NAC V5.0, from V5.0.0 to V5.0.54 for Genian NAC Suite V5.0, and from V6.0.0 to V6.0.15 for Genians ZTNA.

This vulnerability could lead to the execution of malicious code within the organization's systems, posing a serious threat to data integrity and confidentiality. Attackers may exploit this flaw to gain control over the system.

It is recommended to update to the latest versions of Genians Genian NAC and Genians ZTNA that address this vulnerability. A security audit should also be conducted to identify potential threats.