PT-2019-18719 · Interpeak+1 · Ipcomshell+1

Ali Abbasi + 1 · Publicado 2019-03-26 · Atualizado 2023-09-20 · CVE-2019-7715

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Green Hills INTEGRITY RTOS version 5.0.4

Description An issue was discovered in the Interpeak IPCOMShell TELNET server. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf(), resulting in a user-controlled format string during login. This leads to an information leak of memory addresses.

Recommendations For Green Hills INTEGRITY RTOS version 5.0.4, consider restricting the ability to set the ipcom.shell.greeting environment variable using the sysvar command to minimize the risk of exploitation. As a temporary workaround, avoid using the printf() function with user-controlled input until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2019-7715

Produtos afetados

Integrity Rtos

Ipcomshell

Referências · 5

• https://github.com/bl4ckic3/GHS-Bugs · Nota
• https://osv.dev/vulnerability/CVE-2019-7715 · Aviso do Fabricante
• https://ghs.com/products/rtos/integrity.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-7715 · Nota de Segurança
• https://twitter.com/konopka_tg/status/1704409941912522878 · Publicação no Twitter