{"id":"CVE-2023-35170","aliases":["EUVD-2023-39174","GHSA-8jxm-xp43-qh3q","GO-2023-1866"],"status":"rejected","title":"Silver vulnerable to MitM attack against implants due to a cryptography vulnerability","description":"This CVE is a duplicate of another CVE.","severity":{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","from":"osv"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-327"],"published":"2023-06-21T22:08:34Z","modified":"2026-10-28T02:30:26Z","affected":[{"source":"osv","ecosystem":"Go","package":"github.com/bishopfox/sliver","ranges":[{"type":"SEMVER","events":[{"introduced":"1.5.0"},{"fixed":"1.5.40"}]}],"bundled":2},{"source":"osv","ecosystem":"Go","package":"github.com/bishopfox/sliver","ranges":[{"type":"SEMVER","events":[{"introduced":"1.5.0"},{"fixed":"1.5.40"}]}],"bundled":2}],"references":[{"url":"https://github.com/BishopFox/sliver/releases/tag/v1.5.40","tags":["web"]},{"url":"https://www.chtsecurity.com/news/04f41dcc-1851-463c-93bc-551323ad8091","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/34xxx/CVE-2023-34758.json","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8jxm-xp43-qh3q","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-34758","tags":["advisory"]},{"url":"https://github.com/tangent65536/Slivjacker","tags":["package","web"]},{"url":"https://github.com/BishopFox/sliver/security/advisories/GHSA-8jxm-xp43-qh3q","tags":["web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35170","tags":["advisory"]},{"url":"https://github.com/BishopFox/sliver/commit/2d1ea6192cac2ff9d6450b2d96043fdbf8561516","tags":["web"]},{"url":"https://github.com/BishopFox/sliver","tags":["package"]},{"url":"https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/crypto.go","tags":["web"]},{"url":"https://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/implant.go","tags":["web"]},{"url":"https://pkg.go.dev/vuln/GO-2023-1866","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2023-35170","description":"This CVE is a duplicate of another CVE.","status":"rejected","published":"2023-06-26T19:40:23.707Z","modified":"2023-06-29T20:40:31.244Z","updated_at":"2026-11-02T14:35:33.462059Z"}],"euvd":[{"id":"EUVD-2023-39174","description":"This CVE is a duplicate of another CVE.","status":"published","published":"2023-06-26T19:40:23Z","modified":"2023-06-29T20:40:31Z","updated_at":"2026-11-03T03:50:56.665945Z"}],"nvd":[{"id":"CVE-2023-35170","description":"Rejected reason: This CVE is a duplicate of another CVE.","status":"rejected","published":"2023-06-26T20:15:10.437Z","modified":"2023-11-07T04:15:54.627Z","updated_at":"2026-11-02T14:08:12.414559Z"}],"osv":[{"id":"GHSA-8jxm-xp43-qh3q","title":"Silver vulnerable to MitM attack against implants due to a cryptography vulnerability","description":"### Summary\nThe current cryptography implementation in Sliver up to version 1.5.39 allows a MitM with access to the corresponding implant binary to execute arbitrary codes on implanted devices via intercepted and crafted responses. (Reserved CVE ID: CVE-2023-34758)\n\n### Details\nPlease see [the PoC repo](https://github.com/tangent65536/Slivjacker).\n\n### PoC\nPlease also see [the PoC repo](https://github.com/tangent65536/Slivjacker).\nTo setup a simple PoC environment,  \n 1. Generate an implant with its C2 set to the PoC server's address and copy the embedded private implant key and public server key into the config json.  \n 2. Run the implant on a separate VM and a `notepad.exe` window should pop up on the implanted VM.  \n\n### Impact\nA successful attack grants the attacker permission to execute arbitrary code on the implanted device.  \n  \n### References\nhttps://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/implant.go  \nhttps://github.com/BishopFox/sliver/blob/master/implant/sliver/cryptography/crypto.go  \nhttps://github.com/tangent65536/Slivjacker  \n\n### Credits\n[Ting-Wei Hsieh](https://github.com/tangent65536) from [CHT Security Co. Ltd.](https://www.chtsecurity.com/?lang=en)","status":"published","published":"2023-06-21T22:08:34Z","modified":"2026-07-08T06:28:02.508775796Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-327"],"updated_at":"2026-11-02T15:46:42.437513Z"},{"id":"CVE-2023-34758","description":"Sliver from v1.5.x to v1.5.39 has an improper cryptographic implementation, which allows attackers to execute a man-in-the-middle attack via intercepted and crafted responses.","status":"published","published":"2023-08-28T00:00:00Z","modified":"2026-10-28T02:30:26.89013946Z","updated_at":"2026-11-02T15:44:32.116263Z"},{"id":"GO-2023-1866","title":"Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver","description":"Silver vulnerable to MitM attack against implants due to a cryptography vulnerability in github.com/bishopfox/sliver","status":"published","published":"2024-08-20T20:31:35Z","modified":"2026-03-03T04:51:29.238601Z","updated_at":"2026-11-02T15:47:01.185262Z"}]}}