CVE-2023-23397

[Abi_Osorio]

Hello

Any information about the new CVE-2023-23397 ?

I looked for this Microsoft vulnerability  but I can´t find any information

Thanks

[the_rock]

Cant find it in dashboard not does anything come up searching for it in support site. Maybe worth TAC call to verify.

[Chris_Atkinson]

Should be published here when available: https://advisories.checkpoint.com/advisories/ 

[Wolfgang]

Still no IPS protection available ?

[Glsk]

It has shown up in the Advisory now: https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2023-0144.html

However, I cannot seem to find it in SmartConsole under IPS Protections and IPS claims it us updated.

[Glsk · Accepted solution]

It has shown up in the Advisory now: https://advisories.checkpoint.com/defense/advisories/public/2023/cpai-2023-0144.html

However, I cannot seem to find it in SmartConsole under IPS Protections and IPS claims it is updated.

Edit: Now able to get the IPS update and the Protection is available.

[Wolfgang]

@Glsk same here 😁

[the_rock]

Excellent, will verify IPS is updated and its there.

[Wolfgang · Accepted solution]

@Abi_Osorio now, it's available see https://advisories.checkpoint.com/advisories/

[Chris_Atkinson · Accepted solution]

Available as reference: CPAI-2023-0144

[Cyber_Serge]

Interesting, I used to be able to type in the CVE number and search the website at https://research.checkpoint.com/ but this time when I search the CVE, it did not show any result.

I was able to search in smartconsole and confirm the IPS Protection exist tough.

[Chris_Atkinson]

Edit: I'll enquire regarding this for you and revert.

Please refer:

https://research.checkpoint.com/2023/20th-march-threat-intelligence-report/

See also:

https://www.avanan.com/blog/avanan-customers-protected-against-cve-2023-23397

https://www.avanan.com/blog/zero-click-attack-the-terminal-blow-to-post-delivery-email-security