CVE Feed

    Dashboard / CVE / CVE-2023-30367

    CVE-2023-30367

    Multi-Remote Next Generation Connection Manager (mRemoteNG) is free software that enables users to store and manage multi-protocol connection configurations to remotely connect to systems. mRemoteNG configuration files can be stored in an encrypted state on disk. mRemoteNG version <= v1.76.20 and <= 1.77.3-dev loads configuration files in plain text into memory (after decrypting them if necessary) at application start-up, even if no connection has been established yet. This allows attackers to access contents of configuration files in plain text through a memory dump and thus compromise user credentials when no custom password encryption key has been set. This also bypasses the connection configuration file encryption setting by dumping already decrypted configurations from memory.

    Published:Jul 26, 2023
    Last Modified:Nov 21, 2024
    EPS:Jul 26, 2023
    EPSS Score:0.00055
    CVSS Score:7.5

    Affected Products

    Vendor
    Mremoteng
    Product
    Mremoteng

    Exploits

    http://packetstormsecurity.com/files/173829/mRemoteNG-1.77.3.1784-NB-Sensitive-Information-Extraction.htmlhttp://packetstormsecurity.com/files/173829/mRemoteNG-1.77.3.1784-NB-Sensitive-Information-Extraction.htmlhttps://github.com/S1lkys/CVE-2023-30367-mRemoteNG-password-dumper

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-37 Retrieve Embedded Sensitive Data

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High