CVE-2023-38831highbajo ataqueransomwareCWE-351

CVE-2023-38831

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear WinRAR

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

100Vexday Risk Score

Corrige ahora. Ella está bajo explotación confirmada por CISA y tiene exploit funcional público.

ssvc Actcvss 7.8epss 100%
de la publicación al arma1 día
Publicada en NVD23 ago
1ª PoC+1d
metasploit23 ago
CISA KEV+1d
Acción exigida por CISAplazo federal: 2023-09-14

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

En resumen

WinRAR en versiones anteriores a 6.23 tiene una falla donde abrir un archivo que parece inofensivo (como una foto) dentro de un ZIP puede ejecutar código malicioso escondido en una carpeta con el mismo nombre. Esta vulnerabilidad fue explotada activamente por atacantes en 2023.

Detalle técnico

Una vulnerabilidad de traversal de ruta en la lógica de extracción de ZIP de WinRAR permite la ejecución de código arbitrario cuando un usuario intenta visualizar un archivo inofensivo que comparte nombre con una carpeta maliciosa dentro del archivo. La vulnerabilidad explota el manejo inadecuado de archivos y directorios con el mismo nombre durante la extracción, permitiendo que atacantes ejecuten código arbitrario con privilegios del usuario. Este CVE fue explotado activamente entre abril y octubre de 2023.

Resumen generado y traducido por IA a partir de la descripción oficial.

El análisis completo de esta CVE está disponible en portugués →

RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through October 2023.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Productos afectados
n/a · n/a
PoCs públicas encontradas — 99
githubgithub.com/b1tg/CVE-2023-38831-winrar-exploit★ 785githubgithub.com/Garck3h/cve-2023-38831★ 128githubgithub.com/ignis-sec/CVE-2023-38831-RaRCE★ 114githubgithub.com/BoredHackerBlog/winrar_CVE-2023-38831_lazy_poc★ 91githubgithub.com/HDCE-inc/CVE-2023-38831★ 90githubgithub.com/knight0x07/WinRAR-Code-Execution-Vulnerability-CVE-2023-38831★ 40githubgithub.com/Maalfer/CVE-2023-38831_ReverseShell_Winrar-RCE★ 22githubgithub.com/xaitax/WinRAR-CVE-2023-38831★ 18githubgithub.com/MorDavid/CVE-2023-38831-Winrar-Exploit-Generator-POC★ 13githubgithub.com/ahmed-fa7im/CVE-2023-38831-winrar-expoit-simple-Poc★ 11githubgithub.com/Malwareman007/CVE-2023-38831★ 9githubgithub.com/youmulijiang/evil-winrar★ 9githubgithub.com/UnHackerEnCapital/PDFernetRemotelo★ 6githubgithub.com/z3r0sw0rd/CVE-2023-38831-PoC★ 6githubgithub.com/xk-mt/WinRAR-Vulnerability-recurrence-tutorial★ 4githubgithub.com/PascalAsch/CVE-2023-38831-KQL★ 4githubgithub.com/Mich-ele/CVE-2023-38831-winrar★ 3githubgithub.com/kuyrathdaro/cve-2023-38831★ 3githubgithub.com/RonF98/CVE-2023-38831-POC★ 3githubgithub.com/ameerpornillos/CVE-2023-38831-WinRAR-Exploit★ 3githubgithub.com/malvika-thakur/CVE-2023-38831★ 3githubgithub.com/akhomlyuk/cve-2023-38831★ 3githubgithub.com/MaorBuskila/Windows-X64-RAT★ 2githubgithub.com/IR-HuntGuardians/CVE-2023-38831-HUNT★ 2githubgithub.com/r1yaz/winDED★ 2githubgithub.com/thegr1ffyn/CVE-2023-38831★ 1githubgithub.com/SpamixOfficial/CVE-2023-38831★ 1githubgithub.com/ruycr4ft/CVE-2023-38831★ 1githubgithub.com/technicalcorp0/CVE-2023-38831-Exploit★ 1githubgithub.com/Ben1B3astt/CVE-2023-38831_ReverseShell_Winrar★ 1githubgithub.com/yezzfusl/cve_2023_38831_scanner★ 1githubgithub.com/olowostandard1/CVE-2023-38831-WinRAR-Vulnerability-Analysis★ 1githubgithub.com/s4m98/winrar-cve-2023-38831-poc-gen★ 1githubgithub.com/solomon12354/VolleyballSquid-----CVE-2023-38831-and-Bypass-UAC★ 0githubgithub.com/ML-K-eng/CVE-2023-38831-Exploit-and-Detection★ 0githubgithub.com/sudo-py-dev/CVE-2023-38831★ 0githubgithub.com/sh770/CVE-2023-38831★ 0githubgithub.com/asepsaepdin/CVE-2023-38831★ 0githubgithub.com/Fa1c0n35/CVE-2023-38831-winrar-exploit★ 0githubgithub.com/GOTonyGO/CVE-2023-38831-winrar★ 0githubgithub.com/ngothienan/CVE-2023-38831★ 0githubgithub.com/Nielk74/CVE-2023-38831★ 0githubgithub.com/kehrijksen/CVE-2023-38831★ 0githubgithub.com/h3xecute/SideCopy-Exploits-CVE-2023-38831★ 0githubgithub.com/MyStuffYT/CVE-2023-38831-POC★ 0githubgithub.com/RomainBayle08/CVE-2023-38831★ 0githubgithub.com/imbyter/imbyter-WinRAR_CVE-2023-38831★ 0githubgithub.com/Hirusha-N/CVE-2021-34527-CVE-2023-38831-and-CVE-2023-32784★ 0githubgithub.com/khanhtranngoccva/cve-2023-38831-poc★ 0githubgithub.com/FirFirdaus/CVE-2023-38831★ 0githubgithub.com/ra3edAJ/LAB-DFIR-cve-2023-38831★ 0githubgithub.com/idkwastaken/CVE-2023-38831★ 0githubgithub.com/VictoriousKnight/CVE-2023-38831_Exploit★ 0githubgithub.com/Tolu12wani/Demonstration-of-CVE-2023-38831-via-Reverse-Shell-Execution★ 0githubgithub.com/yangdayyy/cve-2023-38831★ 0githubgithub.com/anelya0333/Exploiting-CVE-2023-38831★ 0githubgithub.com/mishra0230/CVE-2023-38831★ 0githubgithub.com/lightningspeed221/Winrar-Exploit-CVE-2023-38831★ 0cve_referencepacketstormsecurity.com/files/174573/WinRAR-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/f3b016e52591no verificadovulncheckvulncheck.com/xdb/3e5e3d32361ano verificadovulncheckvulncheck.com/xdb/78c5d047fc26no verificadovulncheckvulncheck.com/xdb/6ddb49c0b30fno verificadovulncheckvulncheck.com/xdb/0d73a5eda2f5no verificadovulncheckvulncheck.com/xdb/477e160f5f9eno verificadovulncheckvulncheck.com/xdb/d4284b00ae4fno verificadovulncheckvulncheck.com/xdb/e1fd4d52e040no verificadovulncheckvulncheck.com/xdb/0c5387964f92no verificadovulncheckvulncheck.com/xdb/13a6362b2a83no verificadovulncheckvulncheck.com/xdb/e63676267c2bno verificadovulncheckvulncheck.com/xdb/11b438e8125eno verificadovulncheckvulncheck.com/xdb/961810ec007ano verificadovulncheckvulncheck.com/xdb/6208ddae83eano verificadovulncheckvulncheck.com/xdb/35f40b8462a2no verificadovulncheckvulncheck.com/xdb/d704a3a58e0dno verificadovulncheckvulncheck.com/xdb/d33335e6c044no verificadovulncheckvulncheck.com/xdb/09fa7b37a7b1no verificadovulncheckvulncheck.com/xdb/d05f5cb3bfb3no verificadovulncheckvulncheck.com/xdb/a75f196603f7no verificadovulncheckvulncheck.com/xdb/ca38deed9702no verificadovulncheckvulncheck.com/xdb/b966bed92174no verificadovulncheckvulncheck.com/xdb/4902c64dcdccno verificadovulncheckvulncheck.com/xdb/475dd98e97c6no verificadovulncheckvulncheck.com/xdb/7dcca41be653no verificadovulncheckvulncheck.com/xdb/2ca9a374accano verificadovulncheckvulncheck.com/xdb/19a60291e736no verificadovulncheckvulncheck.com/xdb/ed6dc92dcb52no verificadovulncheckvulncheck.com/xdb/79f7f6337617no verificadovulncheckvulncheck.com/xdb/e71319d3a28fno verificadovulncheckvulncheck.com/xdb/8e66511c03f9no verificadovulncheckvulncheck.com/xdb/068a817a11afno verificadovulncheckvulncheck.com/xdb/12c5984d5f98no verificadovulncheckvulncheck.com/xdb/96f0b49ccafbno verificadovulncheckvulncheck.com/xdb/49b8da5dd1b3no verificadovulncheckvulncheck.com/xdb/43e31d83b0d2no verificadovulncheckvulncheck.com/xdb/ddbc6a584660no verificadovulncheckvulncheck.com/xdb/495cffd03d38no verificadovulncheckvulncheck.com/xdb/740f24ebd0b8no verificadovulncheckvulncheck.com/xdb/f9dfaa39379dno verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.