CVE-2023-50444

HIGH

PRIMX ZED!/ZEDMAIL <2023.5 & ZONECENTRAL <Q.2021.2 - Unauthenticated Sensitive Info Exposure via Brute Force

Title source: llm
STIX 2.1

Description

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force.

References (2)

Core 2

Scores

CVSS v3 7.5
EPSS 0.0061
EPSS Percentile 44.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-307
Status published
Products (3)
primx/zed\! < q.2020.3
primx/zedmail < 2023.5
primx/zonecentral < q.2021.2
Published Dec 13, 2023
Tracked Since Feb 18, 2026