PT-2023-15808 · Unknown · Control De Ciber

Sergio Apellániz · Publicado 2023-09-12 · Atualizado 2023-09-15 · CVE-2022-48475

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Control de Ciber version 1.650

Description The issue is a Buffer Overflow vulnerability in the printing function. It occurs when an administrator tries to accept or delete a print query created by a modified request sent by an attacker. This could potentially cause a Buffer Overflow.

Recommendations For Control de Ciber version 1.650, consider disabling the printing function until a patch is available to prevent potential exploitation. Restrict access to the printing function to minimize the risk of a Buffer Overflow. Avoid using the printing function in the affected version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Buffer Overflow

Enumeração de Fraquezas

CWE-400

CWE-120

Identificadores relacionados

CVE-2022-48475

Produtos afetados

Control De Ciber

Referências · 7

• https://t.me/cibsecurity/70254 · Publicação no Telegram
• https://twitter.com/cracbot/status/1701838174463627568 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2022-48475 · Nota de Segurança
• https://twitter.com/CVEnew/status/1701500661651886239 · Publicação no Twitter
• https://t.me/cvenotify/58034 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2022-48475 · Aviso do Fabricante
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-control-de-ciber · Nota