CVE-2023-30367

CVE-2023-30367 is a high-severity vulnerability affecting mRemoteNG versions <= v1.76.20 and <= 1.77.3-dev. It allows an attacker to extract sensitive data, such as user credentials, from memory dumps. The vulnerability stems from mRemoteNG loading configuration files, even encrypted ones, into plain text in memory at startup, making them accessible to an attacker with memory access. This vulnerability has a CVSS score of 7.5, indicating a high risk due to its network attack vector and low attack complexity, potentially leading to a complete compromise of confidentiality. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.