Improper Memory Buffer Management in HYPR Workforce Access on Windows
CVE-2023-6334

5.3MEDIUM

Key Information:

Vendor

Hypr

Status
Workforce Access
Vendor
CVE Published:
16 January 2024

What is CVE-2023-6334?

An improper restriction of operations within the bounds of a memory buffer vulnerability has been identified in HYPR Workforce Access when running on Windows systems. This vulnerability allows for potential buffer overflow situations, which could lead to unauthorized access and the execution of arbitrary code. It is crucial for users of Workforce Access versions before 8.7 to assess the impact of this vulnerability and take necessary precautions. For more details, refer to the official security advisory from HYPR.

Affected Version(s)

Workforce Access Windows 0 < 8.7

References

https://www.hypr.com/security-advisories

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.