Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2023-40596

In Splunk Enterprise versions earlier than 8.2.12, 9.0.6, and 9.1.1, a dynamic link library (DLL) that ships with Splunk Enterprise references an insecure path for the OPENSSLDIR build definition. An attacker can abuse this reference and subsequently install malicious code to achieve privilege escalation on the Windows machine.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 21.0%
CVSS Severity
CVSS v3 Score 7.0
Products affected by CVE-2023-40596
  • Splunk » Splunk » Version: 8.2.0
    cpe:2.3:a:splunk:splunk:8.2.0
  • Splunk » Splunk » Version: 8.2.10
    cpe:2.3:a:splunk:splunk:8.2.10
  • Splunk » Splunk » Version: 8.2.9
    cpe:2.3:a:splunk:splunk:8.2.9
  • Splunk » Splunk » Version: 9.0.0
    cpe:2.3:a:splunk:splunk:9.0.0
  • Splunk » Splunk » Version: 9.0.3
    cpe:2.3:a:splunk:splunk:9.0.3
  • Splunk » Splunk » Version: 9.0.4
    cpe:2.3:a:splunk:splunk:9.0.4
  • Splunk » Splunk » Version: 9.1.0
    cpe:2.3:a:splunk:splunk:9.1.0
  • Microsoft » Windows » Version: N/A
    cpe:2.3:o:microsoft:windows:-


Products
Pricing
Contact Us

Shodan ® - All rights reserved