by Kastro
Paper/Archive/CVE-2023-45849

CVE-2023-45849

Helix Helix Core — Arbitrary Code Execution in Helix Core

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 66.0.660 × 2013.2No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An arbitrary code execution which results in privilege escalation was discovered in Helix Core versions prior to 2023.2. Reported by Jason Geffner.

Affected

ProductAffectedFixed inSource
Helix Core0.0.0 – < 2023.22023.2CNA
Helix Core0.0.0 – < 2023.1 Patch 22023.1 Patch 2CNA
Helix Core0.0.0 – < 2022.2 Patch 32022.2 Patch 3CNA
Helix Core0.0.0 – < 2022.1 Patch 62022.1 Patch 6CNA
Helix Core0.0.0 – < 2021.2 Patch 102021.2 Patch 10CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Perforce (CNA)9.0CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refperforce.com