Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-29486

EPSS 0.12% · P31
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-29486

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a Microsoft Windows issue, not a Heimdal specific vulnerability. The USB control solution by Heimdal is meant to manage Microsoft Windows native USB restrictions. They maintain that their solution functions as a management layer over Windows settings and is not to blame for limitations in Windows' detection capabilities.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Heimdal 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Heimdal是Heimdal开源的一个 Kerberos 的实现及安全程序。 Heimdal Thor agent存在安全漏洞，该漏洞源于允许攻击者绕过USB访问限制，执行任意代码，并通过Next-Gen Antivirus组件获取敏感信息。受影响的产品和版本：Heimdal Thor agent on Windows 3.4.2及之前版本，on macOS 3.7.0及之前版本。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-29486

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-29486

请登录查看更多情报信息。

Same Patch Batch · n/a · 2023-12-21 · 21 CVEs total

CVE-2023-70376.3 MEDIUMautomad FileController.php import server-side request forgery
CVE-2023-42555.5 MEDIUMW3m: out-of-bounds write in function checktype() in etc.c (incomplete fix for cve-2022-382
CVE-2023-42565.5 MEDIUMTcpreplay: tcprewrite: double free in tcpedit_dlt_cleanup() in plugins/dlt_plugins.c
CVE-2023-70364.7 MEDIUMautomad Content Type FileCollectionController.php upload unrestricted upload
CVE-2023-70384.3 MEDIUMautomad User Creation cross-site request forgery
CVE-2023-70352.4 LOWautomad Setting post.php cross site scripting
CVE-2023-51049S-CMS 安全漏洞
CVE-2023-51052S-CMS 安全漏洞
CVE-2023-51051S-CMS 安全漏洞
CVE-2023-51050S-CMS 安全漏洞
CVE-2023-29485Heimdal 安全漏洞
CVE-2023-51048S-CMS 安全漏洞
CVE-2023-50481blinksocks 安全漏洞
CVE-2023-50477nOS Client 安全漏洞
CVE-2023-50475Bcoin 安全漏洞
CVE-2023-50473qBit MatUI 安全漏洞
CVE-2023-48116SmarterTools SmarterMail 安全漏洞
CVE-2023-48115SmarterTools SmarterMail 安全漏洞
CVE-2023-48114SmarterTools SmarterMail 安全漏洞
CVE-2023-29487Heimdal 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2023-29486

No comments yet

Leave a comment