CVE-2023-41970

MEDIUM Year: 2023
CVSS v3 Score
6.0
Medium
Weakness Type
CWE-354
View all →

Vulnerability Description

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on Windows during the Repair App functionality may allow Local Execution of Code.This issue affects Client Connector on Windows: before 4.1.0.62.

Related Vulnerabilities

CVE-2016-15028

MEDIUM
CVSS:5.9(Medium)

A vulnerability was found in ICEPAY REST-API-NET 0.9. It has been declared as problematic. Affected by this vulnerability is the function RestClient of the file Classes/RestClient.cs of the component ...

CWE-3542016

CVE-2018-1000159

MEDIUM
CVSS:5.9(Medium)

tlslite-ng version 0.7.3 and earlier, since commit d7b288316bca7bcdd082e6ccff5491e241305233 contains a CWE-354: Improper Validation of Integrity Check Value vulnerability in TLS implementation, tlslit...

CWE-3542018

CVE-2019-1166

MEDIUM
CVSS:5.9(Medium)

A tampering vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLM MIC (Message Integrity Check) protection, aka 'Windows NTLM Tampering Vu...

CWE-3542019

CVE-2023-23119

MEDIUM
CVSS:5.9(Medium)

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes Ubiquiti airFiber AF2X Radio firmware version 3.2.2 and earlier vulnerable to firmware modificat...

CWE-3542023

CVE-2023-23120

MEDIUM
CVSS:5.9(Medium)

The use of the cyclic redundancy check (CRC) algorithm for integrity check during firmware update makes TRENDnet TV-IP651WI Network Camera firmware version v1.07.01 and earlier vulnerable to firmware ...

CWE-3542023

CVE-2023-34459

MEDIUM
CVSS:5.9(Medium)

OpenZeppelin Contracts is a library for smart contract development. Starting in version 4.7.0 and prior to version 4.9.2, when the `verifyMultiProof`, `verifyMultiProofCalldata`, `procesprocessMultiPr...

CWE-3542023