Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which folders are opened.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Zonecentral | Primx | * | q.2021.2 (excluding) |
| Zonecentral | Primx | 2023.0 (including) | 2023.5 (excluding) |