PT-2023-28635 · Frauscher Sensortechnik Gmbh · Fds101

CVE-2023-4291 · Publicado 2023-09-20 · Atualizado 2023-09-22

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi versions 1.4.24 and all previous versions

Description The issue is a remote code execution (RCE) vulnerability that can be exploited via manipulated parameters of the web interface without authentication, potentially leading to a full compromise of the FDS101 device.

Recommendations For versions 1.4.24 and all previous versions, consider disabling access to the web interface until a patch is available to prevent exploitation of the RCE vulnerability. Restrict access to the device to minimize the risk of compromise. Avoid using manipulated parameters in the web interface to prevent potential exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2023-4291

Produtos afetados

Fds101

Referências · 9

• https://cert.vde.com/en/advisories/VDE-2023-038 · Nota
• https://osv.dev/vulnerability/CVE-2023-4291 · Aviso do Fabricante
• https://t.me/cvenotify/58417 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1704807910692544799 · Publicação no Twitter
• https://twitter.com/cracbot/status/1705099649252770037 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-4291 · Nota de Segurança
• https://t.me/cibsecurity/70869 · Publicação no Telegram
• https://t.me/cvenotify/58275 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1704747148036976886 · Publicação no Twitter