CVE-2023-39341

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-08-09 · updated 2026-06-17
Weakness: CWE-755

Description

"FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0).

Affected products

Ffri Dual Safe: 1.4.1
Ffri Yarai: from 3.4.0 through 3.4.6; 1.4.0, 3.5.0
NEC Actsecure X Managed Security Service: from 3.4.0 through 3.4.6; 3.5.0
Sky Co., Ltd. EDR Plus Pack: from 3.4.0 through 3.4.6; 3.5.0
Sky Co., Ltd. EDR Plus Pack Cloud: from 3.4.0 through 3.4.6; 3.5.0
Soliton Infotrace Mark Ii Malware Protection: from 3.0.1 through 3.2.2
Soliton Zerona: from 3.2.32 through 3.2.36
Soliton Zerona Plus: from 3.2.32 through 3.2.36

References

Get alerted when CVE-2023-39341 or the next vulnerability affects your stack