CVE-2023-6062

Published: Nov 20, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Exploitability: 1.2 / Impact: 5.2

Source: NVD

Description

An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessus Rules variables to overwrite arbitrary files on the remote host, which could lead to a denial of service condition.

Affected (2)

Products: Tenable: Nessus

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Tenable Nessus	Before 10.5.7
Tenable Nessus	From 10.6.0 to 10.6.3

Related CWEs

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (4)

https://www.tenable.com/security/tns-2023-39

Source: vulnreport@tenable.com

Vendor Advisory

https://www.tenable.com/security/tns-2023-40

Source: vulnreport@tenable.com

Vendor Advisory

https://www.tenable.com/security/tns-2023-39

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://www.tenable.com/security/tns-2023-40

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.