PT-2023-15808 · Unknown · Control De Ciber

Sergio Apellániz · Published 2023-09-12 · Updated 2023-09-15 · CVE-2022-48475

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Control de Ciber version 1.650

Description The issue is a Buffer Overflow vulnerability in the printing function. It occurs when an administrator tries to accept or delete a print query created by a modified request sent by an attacker. This could potentially cause a Buffer Overflow.

Recommendations For Control de Ciber version 1.650, consider disabling the printing function until a patch is available to prevent potential exploitation. Restrict access to the printing function to minimize the risk of a Buffer Overflow. Avoid using the printing function in the affected version until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Buffer Overflow

Weakness Enumeration

CWE-400

CWE-120

Related Identifiers

CVE-2022-48475

Affected Products

Control De Ciber

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-48475 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48475 · Vendor Advisory
• https://t.me/cibsecurity/70254 · Telegram Post
• https://twitter.com/cracbot/status/1701838174463627568 · Twitter Post
• https://twitter.com/CVEnew/status/1701500661651886239 · Twitter Post
• https://t.me/cvenotify/58034 · Telegram Post
• https://incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-control-de-ciber · Note