CVE-2023-36650

7.2 highEPSS 0.4%

High (7.2) in prolion cryptospike. EPSS 0.4% chance of exploitation in the next 30 days.

A missing integrity check in the update system in ProLion CryptoSpike 3.0.15P2 allows attackers to execute OS commands as the root Linux user on the host system via forged update packages.

Severity

CVSS 3.1

7.2 high

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 33% of CVEs (scores of 2026-10-31)
CWE: CWE-354
Published: 2023-12-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

prolion:cryptospike

References

https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36650
https://www.cvcn.gov.it/cvcn/cve/CVE-2023-36650

Check your stack JSON