Is CVE-2023-51838 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2023-51838 being exploited in the wild.

How severe is CVE-2023-51838?

Low severity, with a CVSS score of 3.1, published 2 February 2024.

Which products and versions are affected?

Ylianst MeshCentral 1.1.16 and earlier.

Is there a fix for CVE-2023-51838?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2023-51838 attacked?

It is attacked over the network.

Am I affected by CVE-2023-51838?

Check whether you run Ylianst MeshCentral at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2023-51838: Ylianst MeshCentral weak cryptographic algorithm

CVE-2023-51838 · Severity: low · CVSS 3.1 · Published 2024-02-02

MeshCentral is a web-based remote monitoring and management platform used to remotely access and control devices over networks. The application uses a broken or risky cryptographic algorithm, which weakens the security of encrypted communications and sensitive data protection. An attacker with network access could potentially decrypt or compromise encrypted data in transit or at rest.

Technologies: Ylianst MeshCentral. Vendors: Ylianst.

Quick answers

Is CVE-2023-51838 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2023-51838 being exploited in the wild.
How severe is CVE-2023-51838?: Low severity, with a CVSS score of 3.1, published 2 February 2024.
Which products and versions are affected?: Ylianst MeshCentral 1.1.16 and earlier.
Is there a fix for CVE-2023-51838?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2023-51838 attacked?: It is attacked over the network.
Am I affected by CVE-2023-51838?: Check whether you run Ylianst MeshCentral at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

MeshCentral 1.1.16 uses a cryptographic algorithm that is considered broken or insufficient for secure operations (CWE-327). The vulnerability allows an attacker with network access to intercept and decrypt communications or bypass cryptographic protections without authentication requirements. The root cause stems from reliance on weak or deprecated cryptographic algorithms rather than secure modern alternatives. An attacker can achieve confidentiality breaches by decrypting sensitive data, though integrity and availability are not directly impacted. Patches addressing this issue are available in newer versions of MeshCentral beyond 1.1.16.

Affected products

Ylianst MeshCentral 1.1.16 and earlier

Identifiers

CVE-2023-51838
GHSA-v269-rrr6-cx6r

Timeline

2024-02-02: disclosed
2024-02-02: advisory: GHSA-v269-rrr6-cx6r published

References

https://github.com/Ylianst/MeshCentral

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.