PT-2023-19710 · Array Networks · Vxag+1

Published 2023-02-03 · Updated 2025-03-26 · CVE-2023-24613

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Array Networks AG Series and vxAG versions 9.4.0.470 and earlier

Description The user interface of Array Networks AG Series and vxAG could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend binary file that handles the user interface to cause a denial of service attack.

Recommendations For Array Networks AG Series and vxAG versions 9.4.0.470 and earlier, update to version 9.4.0.481 to resolve the issue. As a temporary workaround, consider restricting access to the system with administrator privileges to minimize the risk of exploitation.

Fix

DoS

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-24613

Affected Products

Array Networks Ag Series

Vxag

References · 7

• https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_UI_Stack_Overflow_Vulnerability_ID-128285_V1.0.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-24613 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-24613 · Security Note
• https://t.me/cvenotify/44045 · Telegram Post
• https://t.me/cvenotify/116333 · Telegram Post
• https://t.me/cibsecurity/57437 · Telegram Post
• https://t.me/cvenotify/43514 · Telegram Post