CVE-2023-40252mediumCWE-94

CVE-2023-40252: medium-severity vulnerability in Genians Genian NAC V4.0

Published · Updated

Follow this CVE+ Monitor Genian NAC+ Monitor Genian ZTNA

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6epss 0.4%
Improper Control of Generation of Code ('Code Injection') vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Replace Trusted Executable.This issue affects Genian NAC V4.0: from V4.0.0 through V4.0.155; Genian NAC V5.0: from V5.0.0 through V5.0.42 (Revision 117460); Genian NAC Suite V5.0: from V5.0.0 through V5.0.54; Genian ZTNA: from V6.0.0 through V6.0.15.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N
Affected products
Genians · Genian NAC Suite V5.0Genians · Genian NAC V4.0Genians · Genian NAC V5.0Genians · Genian ZTNA
Related CVEs — Genians Genian NAC V4.0

In the same product, most dangerous first.

CVE-2026-16520HIGHCVE-2026-16520EPSS 0.5%CVE-2023-40253MEDIUMCVE-2023-40253EPSS 0.4%CVE-2024-23843LOWCVE-2024-23843EPSS 0.3%CVE-2023-40254HIGHCVE-2023-40254EPSS 0.2%CVE-2023-40251MEDIUMCVE-2023-40251EPSS 0.2%