CVE-2023-39341
Summary
| CVE | CVE-2023-39341 |
|---|---|
| State | PUBLISHED |
| Assigner | jpcert |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2023-08-09 03:15:43 UTC |
| Updated | 2026-11-10 13:10:00 UTC |
| Description | "FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS) condition. Affected products and versions are as follows: FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0, FFRI yarai Home and Business Edition version 1.4.0, InfoTrace Mark II Malware Protection (Mark II Zerona) versions 3.0.1 to 3.2.2, Zerona / Zerona PLUS versions 3.2.32 to 3.2.36, ActSecure χ versions 3.4.0 to 3.4.6 and 3.5.0, Dual Safe Powered by FFRI yarai version 1.4.1, EDR Plus Pack (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0), and EDR Plus Pack Cloud (Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0). |
Risk And Classification
Primary CVSS: v3.1 3.3 LOW from [email protected]
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Problem Types: CWE-755 | Improper check or handling of exceptional conditions
CVSS v3.1 Breakdown
Attack Vector
LocalAttack Complexity
LowPrivileges Required
NoneUser Interaction
RequiredScope
UnchangedConfidentiality
NoneIntegrity
NoneAvailability
LowCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Ffri | Dual Safe | 1.4.1 | All | All | All |
| Application | Ffri | Ffri Yarai | 1.4.0 | All | All | All |
| Application | Ffri | Ffri Yarai | 3.5.0 | All | All | All |
| Application | Ffri | Ffri Yarai | All | All | All | All |
| Application | Nec | Actsecure X Managed Security Service | 3.5.0 | All | All | All |
| Application | Nec | Actsecure X Managed Security Service | All | All | All | All |
| Application | Skygroup | Edr Plus Pack | 3.5.0 | All | All | All |
| Application | Skygroup | Edr Plus Pack | All | All | All | All |
| Application | Skygroup | Edr Plus Pack Cloud | 3.5.0 | All | All | All |
| Application | Skygroup | Edr Plus Pack Cloud | All | All | All | All |
| Application | Soliton | Infotrace Mark Ii Malware Protection | All | All | All | All |
| Application | Soliton | Zerona | All | All | All | All |
| Application | Soliton | Zerona Plus | All | All | All | All |
Vendor Declared Affected Products
| Source | Vendor | Product | Version | Platforms |
|---|---|---|---|---|
| CNA | FFRI Security Inc. | FFRI Yarai | affected versions 3.4.0 to 3.4.6 and 3.5.0 | Not specified |
| CNA | FFRI Security Inc. | FFRI Yarai Home And Business Edition | affected version 1.4.0 | Not specified |
| CNA | Soliton Systems K.K. | InfoTrace Mark II Malware Protection Mark II Zerona | affected versions 3.0.1 to 3.2.2 | Not specified |
| CNA | Soliton Systems K.K. | Zerona / Zerona PLUS | affected versions 3.2.32 to 3.2.36 | Not specified |
| CNA | NEC Corporation | ActSecure | affected versions 3.4.0 to 3.4.6 and 3.5.0 | Not specified |
| CNA | SOURCENEXT CORPORATION | Dual Safe Powered By FFRI Yarai | affected version 1.4.1 | Not specified |
| CNA | Sky Co. Ltd. | EDR Plus Pack | affected Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0 | Not specified |
| CNA | Sky Co. Ltd. | EDR Plus Pack Cloud | affected Bundled FFRI yarai versions 3.4.0 to 3.4.6 and 3.5.0 | Not specified |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| 「二重の安心 Powered by FFRI yarai」の脆弱性と修正完了に関するお知らせ(2023.08.07)HTMLタイトル｜ソースネクスト総合サポート | af854a3a-2127-422b-91ae-364da2661108 | www.sourcenext.com | Third Party Advisory |
| 【重要】製品の脆弱性対応｜株式会社ＦＦＲＩセキュリティ-サイバーセキュリティ、エンドポイントセキュリティ | af854a3a-2127-422b-91ae-364da2661108 | www.ffri.jp | Vendor Advisory |
| JVN#42527152: "FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly | af854a3a-2127-422b-91ae-364da2661108 | jvn.jp | Third Party Advisory |
| 【重要】Zerona 特定条件下で(マルウェア防御/マルウェア対策)機能が一時停止する脆弱性について | サポート | ソリトンシステムズ | af854a3a-2127-422b-91ae-364da2661108 | www.soliton.co.jp | Third Party Advisory |
| 『EDRプラスパック』および『EDRプラスパックCloud』に同梱しているFFRI yaraiの脆弱性（CVE-2023-39341）｜ITセキュリティ対策とリスクの発見を支援 SKYSEA Client View | af854a3a-2127-422b-91ae-364da2661108 | www.skyseaclientview.net | Third Party Advisory |
| ログイン | NEC | af854a3a-2127-422b-91ae-364da2661108 | www.support.nec.co.jp | Permissions Required |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.