PT-2023-3941 · Kepware · Kepserverex
Claroty Team82
·
Publicado
2023-07-27
·
Atualizado
2025-02-12
·
CVE-2023-3825
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
KEPServerEX versions 6.0 through 6.14.263
Description
The issue is related to the implementation of the OPC UA protocol in KEPServerEX, which can lead to uncontrolled resource consumption. This occurs because KEPServerEX does not implement a check for recursively defined objects, allowing an attacker to send a maliciously created message that the decoder would try to decode until the stack overflowed and the device crashed. The estimated number of potentially affected devices worldwide is not specified. There are reports of real-world incidents where this issue was exploited, resulting in a denial-of-service.
Recommendations
For KEPServerEX versions 6.0 through 6.14.263, consider disabling the OPC UA protocol temporarily until a patch is available to prevent exploitation. Restrict access to the KEPServerEX to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Resource Exhaustion
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Kepserverex