PT-2017-9630 · Schneider Electric · Connexium Firewalls

George Lashenko · Publicado 2017-02-13 · Atualizado 2017-03-15 · CVE-2016-8352

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Schneider Electric ConneXium firewalls version TCSEFEC23F3F20 Schneider Electric ConneXium firewalls version TCSEFEC23F3F21 Schneider Electric ConneXium firewalls version TCSEFEC23FCF20 Schneider Electric ConneXium firewalls version TCSEFEC23FCF21 Schneider Electric ConneXium firewalls version TCSEFEC2CF3F20

Description A stack-based buffer overflow issue can be triggered during the SNMP login authentication process, potentially allowing an attacker to remotely execute code.

Recommendations For version TCSEFEC23F3F20, consider disabling SNMP login authentication until a patch is available. For version TCSEFEC23F3F21, consider disabling SNMP login authentication until a patch is available. For version TCSEFEC23FCF20, consider disabling SNMP login authentication until a patch is available. For version TCSEFEC23FCF21, consider disabling SNMP login authentication until a patch is available. For version TCSEFEC2CF3F20, consider disabling SNMP login authentication until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2016-8352

Produtos afetados

Connexium Firewalls

Referências · 3

• https://ics-cert.us-cert.gov/advisories/ICSA-16-306-01 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-8352 · Nota de Segurança
• http://securityfocus.com/bid/94062 · Nota