What’s Vulnerable › Vulnerabilities

CVE-2023-7169: Impersonate vendor signed Powershell scripts

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-02-08 · updated 2026-06-17
• Weakness: CWE-290

Description

Authentication Bypass by Spoofing vulnerability in Snow Software Snow Inventory Agent on Windows allows Signature Spoof.This issue affects Snow Inventory Agent: through 6.14.5. Customers advised to upgrade to version 7.0

Affected products

• Snow Software Inventory Agent: before 7.0 — fixed in 7.0

How to fix

Upgrade to a fixed version: Snow Software Inventory Agent 7.0. Check the vendor advisory for mitigations.

References

• https://community.snowsoftware.com/s/feed/0D5Td000004YtMcKAK
• https://community.snowsoftware.com/s/feed/0D5Td000004YtMcKAK

Get alerted when CVE-2023-7169 or the next vulnerability affects your stack