PT-2023-19692 · Unknown · Controller 6000

CVE-2023-24584 · Publicado 2023-06-01 · Atualizado 2023-06-08

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Controller 6000 versions prior to vCR8.80.230201a Controller 6000 versions prior to vCR8.70.230201a Controller 6000 versions prior to vCR8.60.230201b Controller 6000 versions prior to vCR8.50.230201a Controller 6000 versions vCR8.40 and prior

Description The issue is a buffer overflow via the Controller diagnostic web interface upload feature.

Recommendations For versions prior to vCR8.80.230201a, update to vCR8.80.230201a or later. For versions prior to vCR8.70.230201a, update to vCR8.70.230201a or later. For versions prior to vCR8.60.230201b, update to vCR8.60.230201b or later. For versions prior to vCR8.50.230201a, update to vCR8.50.230201a or later. For versions vCR8.40 and prior, update to a version later than vCR8.40.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-120

Identificadores relacionados

CVE-2023-24584

Produtos afetados

Controller 6000

Referências · 4

• https://osv.dev/vulnerability/CVE-2023-24584 · Aviso do Fabricante
• https://t.me/cvenotify/51539 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-24584 · Nota de Segurança
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2023-24584 · Aviso do Fabricante