Vulnerability · Published Jun 28, 2022 · Assigned by krcert
CVE-2022-23763DOUZONE BIZON NeoRS file download and execute vulnerability
High 7.8
In plain English
A high-severity security flaw in NeoRS from DOUZONE BIZON Co.,Ltd. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.3%top 72.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| DOUZONE BIZON Co.,Ltd | NeoRS | unspecified – through 2021.3.10.1 |
Weakness: CWE-346 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H