CVE-2023-43976
HIGHCVSS 8.1/10EPSS 0.53%
Last modified
CVE-2023-43976 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component.. EPSS estimates a 0.53% chance of exploitation in the next 30 days.
Description
An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Catonetworks | Cato Client | < 5.4.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-43976?
An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component.
How severe is CVE-2023-43976?
CVE-2023-43976 has a CVSS score of 8.1/10 (HIGH severity). The EPSS model estimates a 0.53% probability of exploitation in the next 30 days.
How do I fix CVE-2023-43976?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-43959An issue in YeaLinkSIP-T19P-E2 v.53.84.0.15 allows a remote …8.8
- CVE-2023-43960An issue in DLINK DPH-400SE FRU 2.2.15.8 allows a remote att…8.8
- CVE-2023-43961An issue in Dromara SaToken version 1.3.50RC and before when…8.8
- CVE-2023-43962Cross Site Scripting vulnerability in Xunrui CMS Public Edit…4.8
- CVE-2023-4397A buffer overflow vulnerability in the Zyxel ATP series firm…4.4
- CVE-2023-43971Cross Site Scripting vulnerability in ACG-faka v1.1.7 allows…6.1
- CVE-2023-43979ETS Soft ybc_blog before v4.4.0 was discovered to contain a …9.8
- CVE-2023-4398An integer overflow vulnerability in the source code of the …7.5
- CVE-2023-43980Presto Changeo testsitecreator up to v1.1.1 was discovered t…9.8
- CVE-2023-43981Presto Changeo testsitecreator up to 1.1.1 was discovered to…9.8
- CVE-2023-43982Bon Presta boninstagramcarousel between v5.2.1 to v7.0.0 was…9.8
- CVE-2023-43983Presto Changeo attributegrid up to 2.0.3 was discovered to c…9.8
Are you affected by CVE-2023-43976?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST