Lucene search

HYPRCVE-2023-6334

HistoryJan 16, 2024 - 8:15 p.m.

CVE-2023-6334

2024-01-1620:15:45

CWE-120

CWE-119

HYPR

web.nvd.nist.gov

cve-2023-6334

memory buffer overflow

hypr workforce access

windows

vulnerability

nvd

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7.

Affected configurations

Nvd

Node

hyprworkforce_accessRange<8.7

AND

microsoftwindowsMatch-

VendorProductVersionCPE
hyprworkforce_access*cpe:2.3:a:hypr:workforce_access:*:*:*:*:*:*:*:*
microsoftwindows-cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hypr	workforce_access	*	cpe:2.3:a:hypr:workforce_access::::::::
microsoft	windows	-	cpe:2.3:o:microsoft:windows:-:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Workforce Access",
    "vendor": "HYPR",
    "versions": [
      {
        "lessThan": "8.7",
        "status": "affected",
        "version": "0",
        "versionType": "patch"
      }
    ]
  }
]

References

www.hypr.com/security-advisories

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

6.3

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-6334