CVE-2023-32764

Severity Score

7.8

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track*

*SSVC

Descriptions

Fabasoft Cloud Enterprise Client 23.3.0.130 allows a user to escalate their privileges to local administrator.

*Credits: N/A

CVSS Scores

NISTv3.1 7.8

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

* Common Vulnerability Scoring System

SSVC

Decision:Track*

Exploitation

None

Automatable

Tech. Impact

Total

* Organization's Worst-case Scenario

Timeline

2023-05-15 CVE Reserved
2023-08-03 CVE Published
2023-08-04 EPSS Updated
2024-10-17 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (2)

URL	Tag	Source
https://www.compass-security.com/fileadmin/Research/Advisories/2023_01_CSNC-2023-002_LPE_Cloud_Client.txt	Mitigation

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://help.supportservices.fabasoft.com/index.php?topic=doc/Vulnerabilities-Fabasoft-Folio/vulnerabilities-2023.htm#client-autoupdate-harmful-code-installation-vulnerability-pdo06614-	2023-08-08

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Fabasoft Search vendor "Fabasoft"	Cloud Search vendor "Fabasoft" for product "Cloud"	-	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Fabasoft Search vendor "Fabasoft"	Cloud Enterprise Client Search vendor "Fabasoft" for product "Cloud Enterprise Client"	23.3.0.130 Search vendor "Fabasoft" for product "Cloud Enterprise Client" and version "23.3.0.130"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Fabasoft Search vendor "Fabasoft"	Folio \/ Egov-suite Search vendor "Fabasoft" for product "Folio \/ Egov-suite"	2021 Search vendor "Fabasoft" for product "Folio \/ Egov-suite" and version "2021"	update_rollup_3	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Fabasoft Search vendor "Fabasoft"	Folio \/ Egov-suite Search vendor "Fabasoft" for product "Folio \/ Egov-suite"	2022 Search vendor "Fabasoft" for product "Folio \/ Egov-suite" and version "2022"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Fabasoft Search vendor "Fabasoft"	Folio \/ Egov-suite Search vendor "Fabasoft" for product "Folio \/ Egov-suite"	2022 Search vendor "Fabasoft" for product "Folio \/ Egov-suite" and version "2022"	update_rollup_3	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Fabasoft Search vendor "Fabasoft"	Folio \/ Egov-suite Search vendor "Fabasoft" for product "Folio \/ Egov-suite"	2023 Search vendor "Fabasoft" for product "Folio \/ Egov-suite" and version "2023"	-	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe
Fabasoft Search vendor "Fabasoft"	Folio \/ Egov-suite Search vendor "Fabasoft" for product "Folio \/ Egov-suite"	2023 Search vendor "Fabasoft" for product "Folio \/ Egov-suite" and version "2023"	update_rollup_1	Affected	in	Microsoft Search vendor "Microsoft"	Windows Search vendor "Microsoft" for product "Windows"	-	-	Safe