Read the docs
TI-2022-07799 Aliases CVE-2022-23763GHSA-28pc-jprh-qc56

DOUZONE BIZON NeoRS file download and execute vulnerability

Priority LOW 38CWE-346Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Required
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-346.

Summary

Origin validation error vulnerability in NeoRS’s ActiveX moudle allows attackers to download and execute arbitrary files. Remote attackers can use this vulerability to encourage users to access crafted web pages, causing damage such as malicious code infections.

Why it matters now

EPSS 0.00343 28th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DOUZONE BIZON Co.,LtdNeoRSup to 2021.3.10.1—No fix listedCNA
  • NeoRS VendorDOUZONE BIZON Co.,Ltd Affected up to 2021.3.10.1 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:douzone:neors:*:*:*:*:*:*:*:*before 2021.3.10.1Vulnerabledouzone
cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*not specified by NVDRunning onMicrosoft
  • cpe:2.3:a:douzone:neors:*:*:*:*:*:*:*:* Versions before 2021.3.10.1 Vulnerable ·douzone
  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-23763
  2. 2026-10-03 Alias added: GHSA-28pc-jprh-qc56

References

Advisory 1

  • TI-2020-06384 douzone NeoRS remote support program ActiveX vulnerability CVSS 3.1HIGH 8.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences