PT-2019-18719 · Interpeak+1 · Ipcomshell+1

Ali Abbasi + 1 · Published 2019-03-26 · Updated 2023-09-20 · CVE-2019-7715

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Green Hills INTEGRITY RTOS version 5.0.4

Description An issue was discovered in the Interpeak IPCOMShell TELNET server. The main shell handler function uses the value of the environment variable ipcom.shell.greeting as the first argument to printf(), resulting in a user-controlled format string during login. This leads to an information leak of memory addresses.

Recommendations For Green Hills INTEGRITY RTOS version 5.0.4, consider restricting the ability to set the ipcom.shell.greeting environment variable using the sysvar command to minimize the risk of exploitation. As a temporary workaround, avoid using the printf() function with user-controlled input until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2019-7715

Affected Products

Integrity Rtos

Ipcomshell

References · 5

• https://osv.dev/vulnerability/CVE-2019-7715 · Vendor Advisory
• https://ghs.com/products/rtos/integrity.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7715 · Security Note
• https://github.com/bl4ckic3/GHS-Bugs · Note
• https://twitter.com/konopka_tg/status/1704409941912522878 · Twitter Post