Skip to content
OpenAdvisories
High · 7.8 CVE-2022-23763 EUVD-2022-28699GHSA-28pc-jprh-qc56

DOUZONE BIZON NeoRS file download and execute vulnerability

Published Jun 28, 2022 · Updated Aug 3, 2024 · Assigned by krcert

Description

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

Affected products

VendorProductAffectedFixed
DOUZONE BIZON NeoRS unspecified – ≤ 2021.3.10.1 —

References