Denial of Service Vulnerability in OPSWAT MetaDefender KIOSK
CVE-2023-36659

9.8CRITICAL

Key Information:

Vendor

Opswat

Status
Metadefender Kiosk
Vendor
CVE Published:
15 September 2023

What is CVE-2023-36659?

An identified issue in OPSWAT MetaDefender KIOSK 4.6.1.9996 entails improper processing of long input strings. This flaw could enable remote attackers to disrupt service, resulting in loss of communication and affecting the functionality of the system. It is critical for users to apply available updates and exercise caution with input processing.

References

https://docs.opswat.com/mdkiosk
https://docs.opswat.com/mdkiosk/release-notes/cve-2023-36659

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.