High severity · published Nov 20, 2023
CVE-2023-47172
Certain WithSecure products allow Local Privilege Escalation
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and Server Security 15, and WithSecure Elements Endpoint Protection 17 and later.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 12% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Client Security · Withsecure
15 and later · source: NVD
EE
Elements Endpoint Protection · Withsecure
17 and later · source: NVD
EA
Email And Server Security · Withsecure
15 and later · source: NVD
SS
Server Security · Withsecure
15 and later · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-47172
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-47172
Vendor Advisory
https://www.withsecure.com/en/support/security-advisories/cve-2023-47172
More from Client Security
7.8
CVE-2024-4454
WithSecure Elements Endpoint Protection Link Following Local Privilege Escalation Vulnerability
7.5
CVE-2023-47264
Certain WithSecure products have a buffer over-read whereby processing certain fuzz file types may cause a denial of service (DoS)
7.5
CVE-2023-47263
Certain WithSecure products allow a Denial of Service (DoS) in the antivirus engine when scanning a fuzzed PE32 file
7.5
CVE-2023-42525
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types
7.5
CVE-2023-42524
Certain WithSecure products allow an infinite loop in a scanning engine via unspecified file types