CVE-2023-5964

CVE-2023-5964 is a high-severity vulnerability affecting the 1E-Exchange-DisplayMessage instruction within the 1E End-User Interaction product pack. This flaw allows for arbitrary code execution with SYSTEM privileges on Windows clients due to improper validation of Caption or Message parameters. The CVSS score is 7.2 (High), indicating a network-based attack with low complexity, requiring high privileges, and leading to high impact on confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, suggesting awareness within the cybersecurity community. Remediation involves deleting the vulnerable instruction and replacing it with the updated 1E-Exchange-ShowNotification instruction (version 7.1 or above).