PT-2019-18718 · Interpeak+1 · Interpeak Ipwebs+1

Ali Abbasi + 1 · Publicado 2019-03-26 · Atualizado 2023-09-20 · CVE-2019-7714

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4

Description The issue is related to the allocation of 60 bytes for the HTTP Authentication header in Interpeak IPWEBS on Green Hills INTEGRITY RTOS. When copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.

Recommendations For Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4, consider implementing size checks when copying the HTTP Authentication header to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-7714

Produtos afetados

Green Hills Integrity Rtos

Interpeak Ipwebs

Referências · 6

• 🔥 https://github.com/bl4ckic3/GHS-Bugs · Exploit
• https://twitter.com/RvdP/status/1704560411104919806 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2019-7714 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7714 · Nota de Segurança
• https://twitter.com/konopka_tg/status/1704409941912522878 · Publicação no Twitter
• https://ghs.com/products/rtos/integrity.html · Aviso do Fabricante