CVE-2023-38356

—

CVSS 3.1

8.1 high

EPSS

<1%p48

Published

Sep 19, 2023 (Sep 19, 2023)

Modified

Jun 17, 2026

Description

MiniTool Power Data Recovery 11.6 contains an insecure installation process that allows attackers to achieve remote code execution through a man in the middle attack.

Vendors: minitool
Products: power data recovery
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.