Is CVE-2015-4523 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2015-4523, but active exploitation has not been confirmed.

Can CVE-2015-4523 be exploited remotely?

No. CVE-2015-4523 requires local access to exploit.

What is the CVSS score of CVE-2015-4523?

CVE-2015-4523 has a CVSS score of 9.3 (CRITICAL).

HOME VULNERABILITIESCVE-2015-4523

CRITICALPOC

CVE-2015-4523

CWE-264Published: September 11, 2017· Updated: Jun 17, 2026

9.3

CVSS v3.1

Official Description

Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis.

NVD Source

Technical Analysis

CVE-2015-4523 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.3.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.

A proof-of-concept (PoC) exploit exists for CVE-2015-4523. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.