National Tax Agency
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Chrome Extension for e-Tax Reception System | 1 | – | Jun 30, 2020 |
| e-Tax software | 1 | – | Nov 6, 2023 |
| The installer of e-Tax software(common program) | 1 | – | Sep 26, 2024 |
Exploited and recent CVEs
- CVE-2024-47045 Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges t 0.1%
- CVE-2023-46802 e-Tax software Version3.0.10 and earlier improperly restricts XML external entity references (XXE) due to the configuration of the embedded XML parser. By processing a specially crafted XML file, arbi 0.2%
- CVE-2020-5601 Chrome Extension for e-Tax Reception System Ver1.0.0.0 allows remote attackers to execute an arbitrary command via unspecified vectors. 1.6%