CVE-2023-47267

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2023-12-19 · updated 2026-06-17
Weakness: CWE-269

Description

An issue discovered in TheGreenBow Windows Enterprise Certified VPN Client 6.52, Windows Standard VPN Client 6.87, and Windows Enterprise VPN Client 6.87 allows attackers to gain escalated privileges via crafted changes to memory mapped file.

Affected products

Thegreenbow Vpn Client: from 6.52.004 before 6.52.006; from 6.87.001 before 6.87.108; from 6.87.001 before 6.87.109 — fixed in 6.52.006, 6.87.108, 6.87.109

How to fix

Upgrade to a fixed version: Thegreenbow Vpn Client 6.52.006, 6.87.108, 6.87.109. Check the vendor advisory for mitigations.

References

https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093
https://www.thegreenbow.com/en/support/security-alerts/#deeplink-16093

Get alerted when CVE-2023-47267 or the next vulnerability affects your stack