Language:
Severity: Critical
ID: 180174
File Name: winrar_623.nasl
Version: 1.5
Type: local
Agent: windows
Family: Windows
Published: 8/24/2023
Updated: 4/5/2024
Supported Sensors: Nessus Agent, Nessus
Risk Factor: Critical
Score: 9.7
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2023-40477
Risk Factor: Critical
Base Score: 9.6
Temporal Score: 9.2
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
CPE: cpe:/a:rarlab:winrar
Required KB Items: installed_sw/RARLAB WinRAR, SMB/Registry/Enumerated
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/17/2023
Vulnerability Publication Date: 8/17/2023
CISA Known Exploited Vulnerability Due Dates: 9/14/2023
Core Impact
Metasploit (WinRAR CVE-2023-38831 Exploit)
CVE: CVE-2023-38831, CVE-2023-40477
IAVA: 2023-A-0436-S