Login Request a demo
Low severity · published Aug 9, 2023
CVE-2023-39341
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition
3.3
CVSS
0.3%
EPSS
No
On KEV
Description
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AX
Actsecure X Managed Security Service · Nec
3.4.0 through 3.4.6; 3.5.0 · source: NVD
DS
Dual Safe · Ffri
1.4.1 · source: NVD
EP
Edr Plus Pack · Skygroup
3.4.0 through 3.4.6; 3.5.0 · source: NVD
EP
Edr Plus Pack Cloud · Skygroup
3.4.0 through 3.4.6; 3.5.0 · source: NVD
FY
Ffri Yarai · Ffri
3.4.0 through 3.4.6; 1.4.0; 3.5.0 · source: NVD
IM
Infotrace Mark II Malware Protection · Soliton
3.0.1 through 3.2.2 · source: NVD
ZE
Zerona · Soliton
3.2.32 through 3.2.36 · source: NVD
ZP
Zerona Plus · Soliton
3.2.32 through 3.2.36 · source: NVD
Affected product
DS
Dual Safe
Ffri
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-39341
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-39341
Third Party Advisory
https://jvn.jp/en/jp/JVN42527152/
Vendor Advisory
https://www.ffri.jp/security-info/index.htm
Third Party Advisory
https://www.skyseaclientview.net/news/230807_01/
Third Party Advisory
https://www.soliton.co.jp/support/zerona_notice_2023.html
Third Party Advisory
https://www.sourcenext.com/support/i/2023/230718_01
Permissions Required
https://www.support.nec.co.jp/View.aspx?id=3140109240