CVE-2023-52277

Royal RoyalTSX before 6.0.2.1 allows attackers to cause a denial of service (Heap Memory Corruption and application crash) or possibly have unspecified other impact via a long hostname in an RTSZ file, if the victim clicks on Test Connection. This occurs during SecureGatewayHost object processing in RAPortCheck.createNWConnection.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2023-12-31

Last modified

2024-08-02

Weaknesses

CWE-787

Affected products

• Royaltsx (Royalapps)

References

• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5788.php