PT-2023-5845 · Unknown · Connected Io

Published 2023-08-04 · Updated 2023-08-08 · CVE-2023-33375

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Connected IO versions 2.1.0 and prior

Description The issue is related to a stack-based buffer overflow vulnerability in the communication protocol of the affected software. This vulnerability enables attackers to take control over devices. The exploitation of this vulnerability may allow a remote attacker to gain control over the device.

Recommendations For Connected IO versions 2.1.0 and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-121

CWE-787

CWE-119

Related Identifiers

BDU:2023-06532

CVE-2023-33375

Affected Products

Connected Io

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-33375 · Security Note
• https://bdu.fstec.ru/vul/2023-06532 · Security Note
• https://osv.dev/vulnerability/CVE-2023-33375 · Vendor Advisory
• https://vuldb.com/?id.236165 · Note
• https://connectedio.com/products/routers · Note
• https://claroty.com/team82/disclosure-dashboard/cve-2023-33375 · Note
• https://t.me/cibsecurity/67795 · Telegram Post