What’s Vulnerable › Vulnerabilities

CVE-2023-40253

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-11 · updated 2026-06-17
• Weakness: CWE-78

Description

Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentication Abuse.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.

Affected products

• Genians Genian Nac: from 4.0.0 before 4.0.156; from 5.0.0 before 5.0.55; 5.0.42, 5.0.42-revision_117460 — fixed in 4.0.156, 5.0.55
• Genians Genian ZTNA: from 6.0.0 before 6.0.16 — fixed in 6.0.16

How to fix

Upgrade to a fixed version: Genians Genian Nac 4.0.156, 5.0.55; Genians Genian ZTNA 6.0.16. Check the vendor advisory for mitigations.

References

• https://docs.genians.com/nac/5.0/release/ko/advisories/GN-SA-2023-001.html
• https://docs.genians.com/nac/5.0/release/ko/advisories/GN-SA-2023-001.html

Get alerted when CVE-2023-40253 or the next vulnerability affects your stack