Insecure Update Mechanism in MiniTool Partition Wizard by MiniTool
CVE-2023-38352

8.1HIGH

Key Information:

Vendor

Minitool

Status
Partition Wizard
Vendor
CVE Published:
19 September 2023

What is CVE-2023-38352?

MiniTool Partition Wizard version 12.8 is susceptible to a vulnerability stemming from an insecure update mechanism. This flaw enables attackers to conduct man-in-the-middle attacks, potentially leading to remote code execution. Users of this software are advised to remain vigilant and apply any necessary updates to mitigate the risks associated with this vulnerability.

References

https://0dr3f.github.io/cve/

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.