CVE-2023-50444: Primx Zed!

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

By default, .ZED containers produced by PRIMX ZED! for Windows before Q.2020.3 (ANSSI qualification submission); ZED! for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission); ZONECENTRAL for Windows before 2023.5; ZEDMAIL for Windows before 2023.5; and ZED! for Windows, Mac, Linux before 2023.5 include an encrypted version of sensitive user information, which could allow an unauthenticated attacker to obtain it via brute force.

Affected products

• Primx Zed!: before q.2020.3 (fixed in q.2020.3); from 2023.0, before 2023.5 (fixed in 2023.5); from q.2021.0, before q.2021.2 (fixed in q.2021.2)
• Primx Zedmail: before 2023.5 (fixed in 2023.5)
• Primx Zonecentral: before q.2021.2 (fixed in q.2021.2); from 2023.0, before 2023.5 (fixed in 2023.5)

Published 2023-12-13. Last modified 2026-06-17.