CVE-2023-5623: 
Tenable Nessus Network Monitor vulnerability analysis and mitigation

CVE-2023-5623 is a security vulnerability discovered in Nessus Network Monitor (NNM) affecting versions 6.2.3 and earlier. The vulnerability was first reported to Tenable on August 31, 2023, and was publicly disclosed with the release of NNM 6.3.0 on October 25, 2023. The issue stems from improper Access Control List (ACL) settings on the NNM installation directory (Tenable Advisory).

The vulnerability occurs when NNM is installed to a non-standard location, where it fails to properly set ACLs on its installation directory. This vulnerability has been assigned a CVSS v3.1 base score of 7.0 (High) with the vector string: AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating local access requirements with high complexity (NVD, Tenable Advisory).

If exploited, this vulnerability could allow a low-privileged user to run arbitrary code with SYSTEM privileges on affected Windows systems where NNM is installed in a non-standard location. This represents a significant privilege escalation risk that could lead to complete system compromise (Tenable Advisory).

The vulnerability requires local access to the system and high complexity to exploit. The attacker needs low privileges to initiate the attack, but no user interaction is required once the attack is initiated (NVD).

Tenable has released Nessus Network Monitor version 6.3.0 to address this vulnerability. Users are advised to upgrade to this version to mitigate the risk. The fix can be obtained from the Tenable Downloads Portal (Tenable Advisory).