Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2023-45799: In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary file...

CVE-2023-45799 · published 3 years ago

Summary

In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.

What to do

Update mlsoft tco\!stream to version 8.0.23.215 or later.

Affected software

Vendor	Product	Affected versions
mlsoft	tco\!stream	< 8.0.23.215 `cpe:2.3:a:mlsoft:tco\!stream::::::::`

Original advisory text

In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary file...

In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.

References

https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020 Third Party Advisory

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically
Gives an attacker full control

Severity

9.8 Critical

Exploitation

<1% chance of attack within 30 days

Type

CWE-494Download of Code Without Integrity Check

Timeline

Published30 Oct 2023

Updated31 Oct 2026

First seen29 Sep 2026

Sources

CVE-2023-45799 · NVD

Track software like this

Free during beta