CVE-2023-36650

Published: Dec 12, 2023Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands as the root Linux user on the host system via forged update packages.

Affected (1)

Products: Prolion: Cryptospike

Prolion

1 product

Cryptospike

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Prolion Cryptospike	Version 3.0.15 p2

Related CWEs

CWE-354

Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

References (2)

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36650

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36650

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.