CVE-2022-23763: DOUZONE BIZON NeoRS file download and execute vulnerability

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-06-28 · updated 2026-06-17
Weakness: CWE-346

Description

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

Affected products

DOUZONE BIZON Co.,Ltd NeoRS: before 2021.3.10.1 — fixed in 2021.3.10.1

How to fix

Upgrade to a fixed version: DOUZONE BIZON Co.,Ltd NeoRS 2021.3.10.1. Check the vendor advisory for mitigations.

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66788
https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66788

Get alerted when CVE-2022-23763 or the next vulnerability affects your stack