PatchTheCVEclient vulnerabilities and fixes
Recent CVEs affecting client, with upgrade or downgrade steps. 3 tracked.
client has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-10-05. Highest priority: CVE-2023-45160 (score 46/100).
- CVE-2023-45160 HIGH 8.8 DOWNGRADE In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files
- CVE-2023-45159 HIGH 8.4 DOWNGRADE 1E Client installer can perform arbitrary file deletion on protected files. A non-privileged user could pro
- CVE-2023-3892 MEDIUM 5.6 DOWNGRADE DOWNGRADE Improper Restriction of XML External Entity Reference vulnerability in MIM Assistant and Client DICOM RTst Loa
FAQ
How do I fix client vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is client being exploited right now?
None of the tracked client CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which client CVE should I patch first?
CVE-2023-45160 currently ranks highest (46/100): In the affected version of the 1E Client, an ordinary user could subvert downloaded instruction resource files.