{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-5964","assignerOrgId":"4a68d2b9-b68a-4765-95bd-17f35092666b","state":"PUBLISHED","assignerShortName":"1E","dateReserved":"2023-11-06T12:19:31.831Z","datePublished":"2023-11-06T12:27:12.281Z","dateUpdated":"2025-06-12T14:19:29.853Z"},"containers":{"cna":{"affected":[{"collectionURL":"https://exchange.1e.com/product-packs/end-user-interaction/","defaultStatus":"affected","packageName":"1E-Exchange-DisplayMessage","platforms":["Windows"],"product":"Platform","vendor":"1E","versions":[{"lessThanOrEqual":"23","status":"affected","version":"0","versionType":"Delete"}]}],"credits":[{"lang":"en","type":"finder","user":"00000000-0000-4000-9000-000000000000","value":"Lockheed Martin red team"}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<span style=\"background-color: rgb(255, 255, 255);\">The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on Windows clients.</span><br><br><span style=\"background-color: rgb(255, 255, 255);\">To remediate this issue DELETE the instruction&nbsp;“Show dialogue with caption %Caption% and message %Message%” from the list of instructions in the Settings UI, and replace it with the new instruction&nbsp;1E-Exchange-ShowNotification instruction available in the updated End-User Interaction product pack. The new instruction should show as&nbsp;“Show %Type% type notification with header %Header% and message %Message%” with a version of 7.1 or above.</span>"}],"value":"The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on Windows clients.\n\nTo remediate this issue DELETE the instruction “Show dialogue with caption %Caption% and message %Message%” from the list of instructions in the Settings UI, and replace it with the new instruction 1E-Exchange-ShowNotification instruction available in the updated End-User Interaction product pack. The new instruction should show as “Show %Type% type notification with header %Header% and message %Message%” with a version of 7.1 or above."}],"impacts":[{"capecId":"CAPEC-248","descriptions":[{"lang":"en","value":"CAPEC-248 Command Injection"}]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.9,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-20","description":"CWE-20 Improper Input Validation","lang":"en","type":"CWE"}]}],"providerMetadata":{"orgId":"4a68d2b9-b68a-4765-95bd-17f35092666b","shortName":"1E","dateUpdated":"2025-05-20T08:19:15.885Z"},"references":[{"url":"https://exchange.1e.com/product-packs/end-user-interaction/"},{"url":"https://www.teamviewer.com/en/resources/trust-center/security-bulletins/1e-2023-2006/"}],"source":{"discovery":"UNKNOWN"},"title":"1E-Exchange-DisplayMessage instruction allows for arbitrary code execution","x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"providerMetadata":{"orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE","dateUpdated":"2024-08-02T08:14:25.152Z"},"title":"CVE Program Container","references":[{"url":"https://exchange.1e.com/product-packs/end-user-interaction/","tags":["x_transferred"]},{"url":"https://www.1e.com/trust-security-compliance/cve-info/","tags":["x_transferred"]}]},{"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-06-12T14:18:28.806423Z","id":"CVE-2023-5964","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"title":"CISA ADP Vulnrichment","providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2025-06-12T14:19:29.853Z"}}]}}