CVE-2023-39341

CVSS V2 None CVSS V3 None
Description
"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure ? versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).
Overview
  • CVE ID
  • CVE-2023-39341
  • Assigner
  • vultures@jpcert.or.jp
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-08-09T03:15:43
  • Last Modified Date
  • 2023-08-22T22:14:48
Weakness Enumerations
CWE URL
CWE-755 http://cwe.mitre.org/data/definitions/755.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ffri:dual_safe:1.4.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ffri:ffri_yarai:*:*:*:*:-:*:*:* 1 OR 3.4.0 3.4.6
cpe:2.3:a:ffri:ffri_yarai:1.4.0:*:*:*:home_and_business:*:*:* 1 OR
cpe:2.3:a:ffri:ffri_yarai:3.5.0:*:*:*:-:*:*:* 1 OR
cpe:2.3:a:soliton:infotrace_mark_ii_malware_protection:*:*:*:*:*:*:*:* 1 OR 3.0.1 3.2.2
cpe:2.3:a:soliton:zerona:*:*:*:*:*:*:*:* 1 OR 3.2.32 3.2.36
cpe:2.3:a:soliton:zerona_plus:*:*:*:*:*:*:*:* 1 OR 3.2.32 3.2.36
cpe:2.3:a:nec:actsecure_x_managed_security_service:*:*:*:*:*:*:*:* 1 OR 3.4.0 3.4.6
cpe:2.3:a:nec:actsecure_x_managed_security_service:3.5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:skygroup:edr_plus_pack:*:*:*:*:*:*:*:* 1 OR 3.4.0 3.4.6
cpe:2.3:a:skygroup:edr_plus_pack:3.5.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:skygroup:edr_plus_pack_cloud:*:*:*:*:*:*:*:* 1 OR 3.4.0 3.4.6
cpe:2.3:a:skygroup:edr_plus_pack_cloud:3.5.0:*:*:*:*:*:*:* 1 OR
References
Reference URL Reference Tags
https://jvn.jp/en/jp/JVN42527152/ Third Party Advisory
https://www.ffri.jp/security-info/index.htm Vendor Advisory
https://www.skyseaclientview.net/news/230807_01/ Third Party Advisory
https://www.soliton.co.jp/support/zerona_notice_2023.html Third Party Advisory
https://www.sourcenext.com/support/i/2023/230718_01 Third Party Advisory
https://www.support.nec.co.jp/View.aspx?id=3140109240 Permissions Required
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-39341
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-39341
History
Created Old Value New Value Data Type Notes
2023-09-06 03:20:08 Added to TrackCVE
2023-09-06 03:20:10 Weakness Enumeration new