Secure Systems Engineering Connaiseur REDOS Vulnerability (CVE-2023-7279) Advisory

Key Information 1. Vulnerability Name: - Secure Systems Engineering Connaiseur up to 3.3.0 Delegation Name Targets_Schema.JSON REDOS 2. Vulnerability IDs: - VDB-276268 - CVE-2023-7279 - ID 1407 3. CVSS Meta Temp Score: - 2.5 4. Current Exploit Price: - $0-$5k 5. CTI Interest Score: - 2.39 6. Vulnerability Description: - A REDOS vulnerability exists in the Delegation Name Handler component of Secure Systems Engineering Connaiseur up to 3.3.0, caused by an unknown handling mechanism. - CWE Definition: CWE-1333 - Impact: CPU resource consumption, leading to availability degradation. 7. Disclosure Date: - November 28, 2023 8. Exploit Details: - Technical details are known, but no public exploit tools are available. - Attack Technique: T1449.003 9. Remediation Recommendations: - Upgrade to version 3.3.1. - Apply patch: - Best Mitigation: Upgrade to the latest version. 10. Google Hacking: - Targets can be identified by searching: 11. Exploit Cost: - $0-$5k 12. CTI Interest Score: - 2.39 13. Product: - Secure Systems Engineering Connaiseur up to 3.3.0 14. Copyright: - © 1997-2024 vuldb.com - cc by-nc-sa Summary This vulnerability, named Secure Systems Engineering Connaiseur up to 3.3.0 Delegation Name Targets_Schema.JSON REDOS, affects the Delegation Name Handler component in Secure Systems Engineering Connaiseur. It has a CVSS Meta Temp Score of 2.5, a current exploit price of $0-$5k, and a CTI interest score of 2.39. While technical details of the exploit are known, no public exploit tools are available. Users are advised to upgrade to version 3.3.1 or apply the patch to remediate the issue.

Goal Reached Thanks to every supporter — we hit 100%!

Secure Systems Engineering Connaiseur REDOS Vulnerability (CVE-2023-7279) Advisory