VulnerabilityModified

CVE-2023-39341

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition.

LOW 3.3EPSS 0.29%

Does this matter?

Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.

Description

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).

CVSS 3.1: 3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
EPSS: 0.29% probability · 21th percentile
CISA KEV: Not listed
Weakness: CWE-755
Affected: ffri/dual safe · ffri/ffri yarai · soliton/infotrace mark ii malware protection · soliton/zerona · soliton/zerona plus · nec/actsecure x managed security service · skygroup/edr plus pack · skygroup/edr plus pack cloud
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN42527152/Third Party Advisory
https://www.ffri.jp/security-info/index.htmVendor Advisory
https://www.skyseaclientview.net/news/230807_01/Third Party Advisory
https://www.soliton.co.jp/support/zerona_notice_2023.htmlThird Party Advisory
https://www.sourcenext.com/support/i/2023/230718_01Third Party Advisory
https://www.support.nec.co.jp/View.aspx?id=3140109240Permissions Required
https://jvn.jp/en/jp/JVN42527152/Third Party Advisory
https://www.ffri.jp/security-info/index.htmVendor Advisory
https://www.skyseaclientview.net/news/230807_01/Third Party Advisory
https://www.soliton.co.jp/support/zerona_notice_2023.htmlThird Party Advisory
https://www.sourcenext.com/support/i/2023/230718_01Third Party Advisory
https://www.support.nec.co.jp/View.aspx?id=3140109240Permissions Required

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.