CVE-2023-45799

HIGH

Mlsoft Tco!stream < 8.0.23.215 - Download Without Integrity Check

Title source: rule
STIX 2.1

Description

In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.

References (1)

Scores

CVSS v3 7.2
EPSS 0.0005
EPSS Percentile 15.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-494
Status published
Products (1)
mlsoft/tco\!stream < 8.0.23.215
Published Oct 30, 2023
Tracked Since Feb 18, 2026