PT-2019-18718 · Interpeak+1 · Interpeak Ipwebs+1

Ali Abbasi + 1 · Published 2019-03-26 · Updated 2023-09-20 · CVE-2019-7714

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4

Description The issue is related to the allocation of 60 bytes for the HTTP Authentication header in Interpeak IPWEBS on Green Hills INTEGRITY RTOS. When copying this header to parse, it does not check the size of the header, leading to a stack-based buffer overflow.

Recommendations For Interpeak IPWEBS on Green Hills INTEGRITY RTOS version 5.0.4, consider implementing size checks when copying the HTTP Authentication header to prevent buffer overflows. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-7714

Affected Products

Green Hills Integrity Rtos

Interpeak Ipwebs

References · 6

• 🔥 https://github.com/bl4ckic3/GHS-Bugs · Exploit
• https://osv.dev/vulnerability/CVE-2019-7714 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7714 · Security Note
• https://ghs.com/products/rtos/integrity.html · Vendor Advisory
• https://twitter.com/RvdP/status/1704560411104919806 · Twitter Post
• https://twitter.com/konopka_tg/status/1704409941912522878 · Twitter Post