CVE-2023-50159

HIGH

ScaleFusion 10.5.2 - Kiosk Mode Bypass via File Explorer Launch

Title source: llm
STIX 2.1

Description

In ScaleFusion (Windows Desktop App) agent 10.5.2, Kiosk mode application restrictions can be bypassed allowing arbitrary code to be executed. This is fixed in 10.5.7 by preventing the launching of the file explorer in Agent-based Multi-App and Single App Kiosk mode.

References (3)

Core 3

Scores

CVSS v3 8.8
EPSS 0.0029
EPSS Percentile 20.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-284
Status published
Products (1)
scalefusion/scalefusion 10.5.2
Published Jan 11, 2024
Tracked Since Feb 18, 2026