Approved changes feed: RSS · Atom

cpe:2.3:a:taiwan-ca(twca):jcicsecuritytool:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTaiwan Ca(Twca) (b5d60ba8-06ba-5955-a8bf-cb4e039086d1)
ProductJcicsecuritytool (128bd0cb-3108-5573-96fb-70ab481aca04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-48387 vulnerable 2026-06-08 06:14:27.131930 TAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation
HIGH (8.8)
TAIWAN-CA(TWCA) JCICSecurityTool fails to check the source website and access locations when executing multiple Registry-related functions. In the scenario where a user is using the JCICSecurityTool and has completed identity verification, if the user browses a malicious webpage created by an attacker, the attacker can exploit this vulnerability to read or modify any registry file under HKEY_CURRENT_USER, thereby achieving remote code execution.
Published: 2023-12-15T08:40:34.306Z
Updated: 2024-10-14T06:07:26.822Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.