CVE-2023-40252

MEDIUM

Genian NAC 4.0.0-4.0.155 and 5.0.0-5.0.42, Genian NAC Suite 5.0.0-5.0.54, Genian ZTNA 6.0.0-6.0.15 - Code Injection

Title source: llm

Description

Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.

References (1)

Core 1

Core References

Release Notes

https://docs.genians.com/nac/5.0/release/ko/advisories/GN-SA-2023-001.html

Scores

CVSS v3 6.0

EPSS 0.0036

EPSS Percentile 27.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-94

Status published

Products (3)

genians/genian_nac 5.0.42 (2 CPE variants)

genians/genian_nac 4.0.0 - 4.0.156

genians/genian_ztna 6.0.0 - 6.0.16

Published Aug 17, 2023

Tracked Since Feb 18, 2026