CVE-2023-52277

EUVD-2023-56950
Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clicks on Test Connection. This occurs during SecureGatewayHost object processing in RAPortCheck.createNWConnection.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 14%
Affected Products (NVD)
VendorProductVersion
royalappsroyaltsx
𝑥
< 6.0.2.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php