CVE-2023-48387

CVE-2023-48387 describes a critical vulnerability in the TAIWAN-CA (TWCA) JCICSecurityTool, where it fails to validate the source and access locations for Registry-related functions. This flaw allows an attacker to achieve remote code execution by tricking an authenticated user into visiting a malicious webpage, enabling the attacker to read or modify any registry file under HKEY_CURRENT_USER. With a CVSS score of 8.8 (HIGH), the vulnerability has a network attack vector, low attack complexity, and high impacts on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules or significant community discussion surrounding this CVE.