CVE-2023-49312 Security feature bypass in n/a
Attackers can bypass license validation on multiple systems by manipulating memory and MAC addresses, undermining software integrity controls.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2023-49312?
CVE-2023-49312 is a critical vulnerability in n/a, published on 26 Nov 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address.
Weakness: CWE-295
Which versions are affected by CVE-2023-49312?
It affects 1 product.
Products include Precisionbridge Precision Bridge.
How do I fix CVE-2023-49312?
No fix has been published for CVE-2023-49312 yet. Limit exposure of the affected software until one is available.
Is CVE-2023-49312 being exploited?
There is no known exploitation of CVE-2023-49312 in the wild and no public exploit code.
Sources
Also known as GHSA-pv39-r52p-8pvg.