Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Nuance PowerScribe 360 4.0 | 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.9, 2019.1, 2019.10, 2019.2, 2019.3, 2019.4, 2019.5, 2019.6, 2019.7, 2019.8, 2019.9, 2023.1, 2023.1 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| microsoft | nuance powerscribe 360 version | mitre_affected | 90% |
| microsoft | nuance powerscribe one version | mitre_affected | 90% |
| microsoft | powerscribe one version 2023.1 sp2 patch | mitre_affected | 90% |
| microsoft | powerscribe one version 2023.1 sp3 patch | mitre_affected | 90% |
Updated vendor and product to Microsoft PowerScribe One, added new affected version prior 7.0.243.19, and noted no exploit available.
Added a detailed description of the vulnerability and updated exploit availability status to true.
Initial creation
