CVE-2023-45799: MLSoft TCO!stream Remote Code Execution Vulnerability

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-10-30 · updated 2026-06-17
Weakness: CWE-494

Description

In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the victim download and execute arbitrary files.

Affected products

MLSoft Tco!Stream: before 8.0.23.215 — fixed in 8.0.23.215

How to fix

Upgrade to a fixed version: MLSoft Tco!Stream 8.0.23.215. Check the vendor advisory for mitigations.

References

https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020
https://www.boho.or.kr/kr/bbs/view.do?bbsId=B0000133&nttId=71008&menuNo=205020

Get alerted when CVE-2023-45799 or the next vulnerability affects your stack