PT-2023-16660 · Trellix · Trellix Intelligent Sandbox Cli

Derrick Berg · Published 2023-03-13 · Updated 2023-03-17 · CVE-2023-0978

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Trellix Intelligent Sandbox CLI versions 5.2 and earlier

Description A command injection issue allows a local user to inject and execute arbitrary operating system commands using specially crafted strings. This is due to insufficient validation of arguments passed to specific CLI commands.

Recommendations For versions 5.2 and earlier, update to a version later than 5.2 to resolve the issue. As a temporary workaround, consider restricting the use of the vulnerable CLI command to minimize the risk of exploitation. Avoid using specially crafted strings in CLI commands until the issue is resolved.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-0978

Affected Products

Trellix Intelligent Sandbox Cli

References · 4

• https://osv.dev/vulnerability/CVE-2023-0978 · Vendor Advisory
• https://kcm.trellix.com/corporate/index?page=content&id=SB10397 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-0978 · Security Note
• https://t.me/cibsecurity/59897 · Telegram Post