CVE-2023-30262

HIGH

MIM Concurrent License Server 6.5.0-7.0.9 - Unauthenticated Remote Code Execution via RMI Registry Deserialization

Title source: llm
STIX 2.1

Description

An issue found in MIM software Inc MIM License Server and MIMpacs services v.6.9 thru v.7.0 fixed in v.7.0.10 allows a remote unauthenticated attacker to execute arbitrary code via the RMI Registry service.

References (3)

Core 3
Core References
Mitigation, Patch, Vendor Advisory
https://www.mimsoftware.com/cve-2023-30262

Scores

CVSS v3 8.8
EPSS 0.0084
EPSS Percentile 53.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-502
Status published
Products (2)
mimsoftware/mim_concurrent_license_server 6.5.0 - 7.0.9
mimsoftware/mim_local_concurrent_license_server 6.5.0 - 7.0.9
Published Jun 09, 2023
Tracked Since Feb 18, 2026