PT-2023-7944 · Advantech · Eki-1524+2

S. Dietz + 3 · Publicado 2023-05-08 · Atualizado 2023-05-12 · CVE-2023-2575

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21

Description The issue is related to a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request. This vulnerability may allow a remote attacker to execute arbitrary code by sending specially formed POST requests.

Recommendations For Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21, consider disabling access to the vulnerable function until a patch is available. Restrict access to the affected devices to minimize the risk of exploitation. Avoid using the vulnerable API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Stack Overflow

Enumeração de Fraquezas

CWE-787

CWE-121

Identificadores relacionados

BDU:2023-09028

CVE-2023-2575

Produtos afetados

Eki-1521

Eki-1522

Eki-1524

Referências · 11

• 🔥 http://seclists.org/fulldisclosure/2023/May/4 · Exploit
• 🔥 https://cyberdanube.com/en/multiple-vulnerabilities-in-advantech-eki-15xx-series · Exploit
• https://t.me/cvenotify/50319 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-2575 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-09028 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-2575 · Aviso do Fabricante
• https://advantech.com/en/support/details/firmware?id=1-1J9BED3 · Correção
• http://packetstormsecurity.com/files/172307/Advantech-EKI-15XX-Series-Command-Injection-Buffer-Overflow.html · Nota
• https://advantech.com/en/support/details/firmware?id=1-1J9BECT · Correção
• https://t.me/cibsecurity/63417 · Publicação no Telegram
• https://advantech.com/en/support/details/firmware?id=1-1J9BEBL · Correção