CVE-2023-49312

Precisionbridge Precision Bridge vulnerability

9.1 CRITICALEPSS 0.68%

Published26 Nov 2023

Description

Precision Bridge PrecisionBridge.exe (aka the thick client) before 7.3.21 allows an integrity violation in which the same license key is used on multiple systems, via vectors involving a Process Hacker memory dump, error message inspection, and modification of a MAC address.

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Affected products

Precisionbridge Precision Bridge< 7.3.21

Remediation

Fixed in

Precisionbridge Precision Bridge≥ 7.3.21

Frequently asked

Is CVE-2023-49312 being actively exploited?

CVE-2023-49312 is not in the CISA KEV catalog. Its EPSS exploit probability is 0.68%.

How severe is CVE-2023-49312?

CVE-2023-49312 has a CVSS 3.1 base score of 9.1, rated critical. EPSS estimates a 0.68% probability of exploitation.

Which products are affected by CVE-2023-49312?

Affected products include Precisionbridge Precision Bridge.

How do I fix CVE-2023-49312?

Upgrade affected software to a fixed version, for example Precisionbridge Precision Bridge 7.3.21 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2023-49312 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.