CVE-2023-7169— Impersonate vendor signed Powershell scripts
Quick assessment
Affected
Snow Software Snow Inventory Agent
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Snow Software Inventory Agent是瑞典Snow Software公司的一款代理程序。 Snow Software Inventory Agent存在安全漏洞，该漏洞源于存在欺骗绕过身份验证漏洞，允许签名欺骗。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-7169
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Impersonate vendor signed Powershell scripts
Source: CVE Program / CVE List V5
Vulnerability Description
Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
使用欺骗进行的认证绕过
Source: CVE Program / CVE List V5
Vulnerability Title
Snow Software Inventory Agent 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Snow Software Inventory Agent是瑞典Snow Software公司的一款代理程序。 Snow Software Inventory Agent存在安全漏洞，该漏洞源于存在欺骗绕过身份验证漏洞，允许签名欺骗。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Snow Software | Snow Inventory Agent | 0 ~ 6.14.5 | - |
|
II. Public POCs for CVE-2023-7169
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-7169
请登录查看更多情报信息。
Same Patch Batch · Snow Software · 2024-02-08 · 3 CVEs total
| CVE-2024-1149 | 7.8 HIGH | Improper validation of update packages |
| CVE-2024-1150 | 7.8 HIGH | Improper validation of update packages |
IV. Related Vulnerabilities
Same vendor: Snow Software
-
CVE-2024-1150
Improper validation of update packages -
CVE-2024-1149
Improper validation of update packages -
CVE-2023-3937
Cross site scripting vulnerabilities in Snow License Manager -
CVE-2023-3864
SQL injection vulnerability in Snow License Manager -
CVE-2023-2679
Data leakage in Adobe connector for SPE edition of SLM
Same weakness: CWE-290
-
CVE-2026-71485
Centrifugo: Client-forgeable headers emulation lets any clie -
CVE-2026-69183
Monkeytype: Rate-limit and anti-brute-force controls bypassa -
CVE-2026-76356
Authentication Bypass through IP Address Spoofing in the Aut -
CVE-2026-73995
WordPress User Registration plugin <= 5.2.6 - Broken Authent -
CVE-2026-72816
go-chi chi before 5.3.0 IP Spoofing via RealIP Middleware
V. Comments for CVE-2023-7169
No comments yet