GCVE - cpe:2.3:a:primx:zonecentral:*:*:*:*:*:windows:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:primx:zonecentral:*:*:*:*:*:windows:*:*

part: a version: * update: *

Vendor	Primx (`4b6da3f8-a6f6-532d-97c8-8bbd7c7b83c1`)
Product	Zonecentral (`f1c22ad2-a82a-5836-afbb-ac859d62aca0`)
Edition	*
Language	*
Software edition	*
Target software	windows
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-50444`	vulnerable	2026-06-08 06:16:16.161017	Details available By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force. Published: 2023-12-13T00:00:00.000Z Updated: 2024-11-26T15:22:48.480Z Open on db.gcve.eu Reference links https://www.primx.eu/fr/blog/ https://www.primx.eu/en/bulletins/security-bulletin-23B30874/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50442`	vulnerable	2026-06-08 06:16:16.157946	Details available Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate privileges) so that specific file types are excluded from encryption temporarily. (This modification can, however, be detected, as described in the Administrator Guide.) Published: 2023-12-13T00:00:00.000Z Updated: 2024-08-02T22:16:46.664Z Open on db.gcve.eu Reference links https://www.primx.eu/fr/blog/ https://www.primx.eu/en/bulletins/security-bulletin-23B30933/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50441`	vulnerable	2026-06-08 06:16:16.157537	Details available Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which folders are opened. Published: 2023-12-13T00:00:00.000Z Updated: 2024-10-08T14:31:51.612Z Open on db.gcve.eu Reference links https://www.primx.eu/fr/blog/ https://www.primx.eu/en/bulletins/security-bulletin-23B3093A/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50440`	vulnerable	2026-06-08 06:16:16.157103	Details available ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; ZED! for Windows, Mac, Linux before 2023.5; ZEDFREE for Windows, Mac, Linux before 2023.5; or ZEDPRO for Windows, Mac, Linux before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger network access to an attacker-controlled computer when opened by the victim. Published: 2023-12-13T00:00:00.000Z Updated: 2025-06-03T13:43:44.490Z Open on db.gcve.eu Reference links https://www.primx.eu/fr/blog/ https://www.primx.eu/en/bulletins/security-bulletin-23B30931/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50439`	vulnerable	2026-06-08 06:16:16.149952	Details available ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission), ZED! for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission), ZONECENTRAL for Windows before 2023.5, or ZEDMAIL for Windows before 2023.5 disclose the original path in which the containers were created, which allows an unauthenticated attacker to obtain some information regarding the context of use (project name, etc.). Published: 2023-12-13T00:00:00.000Z Updated: 2024-08-02T22:16:46.870Z Open on db.gcve.eu Reference links https://www.primx.eu/fr/blog/ https://www.primx.eu/en/bulletins/security-bulletin-23B30930/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7312`	vulnerable	2026-06-08 05:14:14.247421	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.