{"id":"CVE-2022-23763","aliases":["EUVD-2022-28699","GHSA-28pc-jprh-qc56"],"status":"published","title":"DOUZONE BIZON NeoRS file download and execute vulnerability","description":"Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00343,"percentile":0.28249,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-346"],"published":"2022-06-28T13:49:01Z","modified":"2026-06-17T04:30:45Z","products":[{"vendor":"douzone","product":"neors"},{"vendor":"douzone bizon co.,ltd","product":"neors"}],"references":[{"url":"https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=66788","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23763"},{"url":"https://github.com/advisories/GHSA-28pc-jprh-qc56"}],"sources":{"cve":[{"id":"CVE-2022-23763","title":"DOUZONE BIZON NeoRS file download and execute vulnerability","description":"Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.","status":"published","published":"2022-06-28T13:49:01Z","modified":"2024-08-03T03:51:45.957Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:34:29.478363Z"}],"euvd":[{"id":"EUVD-2022-28699","description":"Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.","status":"published","published":"2022-06-28T13:49:01Z","modified":"2024-08-03T03:51:45Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T03:25:50.734887Z"}],"ghsa":[{"id":"GHSA-28pc-jprh-qc56","title":"Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and...","description":"Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.","status":"published","published":"2022-06-29T00:00:27Z","modified":"2023-01-27T05:05:24Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:42:41.402468Z"}],"nvd":[{"id":"CVE-2022-23763","description":"Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.","status":"published","published":"2022-06-28T14:15:08.003Z","modified":"2026-06-17T04:30:45.313Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-346"],"updated_at":"2026-11-02T14:07:22.966735Z"}]}}