PT-2023-1387 · Siemens · Comos

Publicado

2023-02-14

·

Atualizado

2023-02-22

·

CVE-2023-24482

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions COMOS V10.2 (All versions) COMOS V10.3.3.1 versions prior to V10.3.3.1.45 COMOS V10.3.3.2 versions prior to V10.3.3.2.33 COMOS V10.3.3.3 versions prior to V10.3.3.3.9 COMOS V10.3.3.4 versions prior to V10.3.3.4.6 COMOS V10.4.0.0 versions prior to V10.4.0.0.31 COMOS V10.4.1.0 versions prior to V10.4.1.0.32 COMOS V10.4.2.0 versions prior to V10.4.2.0.25
Description A vulnerability has been identified in the cache validation service of COMOS, which is vulnerable to a Structured Exception Handler (SEH) based buffer overflow. This could allow an attacker to execute arbitrary code on the target system or cause a denial of service condition. The vulnerability is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code.
Recommendations For COMOS V10.2, update to a version outside of the affected range. For COMOS V10.3.3.1, update to version V10.3.3.1.45 or later. For COMOS V10.3.3.2, update to version V10.3.3.2.33 or later. For COMOS V10.3.3.3, update to version V10.3.3.3.9 or later. For COMOS V10.3.3.4, update to version V10.3.3.4.6 or later. For COMOS V10.4.0.0, update to version V10.4.0.0.31 or later. For COMOS V10.4.1.0, update to version V10.4.1.0.32 or later. For COMOS V10.4.2.0, update to version V10.4.2.0.25 or later.

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

BDU:2023-00756
CVE-2023-24482

Produtos afetados

Comos