PT-2023-19710 · Array Networks · Vxag+1

Publicado 2023-02-03 · Atualizado 2025-03-26 · CVE-2023-24613

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Média

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Array Networks AG Series and vxAG versions 9.4.0.470 and earlier

Description The user interface of Array Networks AG Series and vxAG could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend binary file that handles the user interface to cause a denial of service attack.

Recommendations For Array Networks AG Series and vxAG versions 9.4.0.470 and earlier, update to version 9.4.0.481 to resolve the issue. As a temporary workaround, consider restricting access to the system with administrator privileges to minimize the risk of exploitation.

Correção

DoS

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2023-24613

Produtos afetados

Array Networks Ag Series

Vxag

Referências · 7

• https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_UI_Stack_Overflow_Vulnerability_ID-128285_V1.0.pdf · Aviso do Fabricante
• https://t.me/cvenotify/44045 · Publicação no Telegram
• https://t.me/cvenotify/116333 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-24613 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-24613 · Nota de Segurança
• https://t.me/cibsecurity/57437 · Publicação no Telegram
• https://t.me/cvenotify/43514 · Publicação no Telegram