Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:42341
HistoryAug 06, 2023 - 4:13 p.m.

Remote Code Execution (RCE)

2023-08-0616:13:26
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
remote code execution
virtualbox
vulnerability
rdp connections
arbitrary code

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.0%

virtualbox is vulnerable to Remote Code Execution (RCE). This vulnerability occurs due to a flaw in the way that Oracle VM VirtualBox handles RDP connections. An attacker can exploit this vulnerability to execute arbitrary code on the victim’s system.

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.0%