PT-2024-31662 · Unknown · Fieldserver Gateway

Published 2024-11-29 · Updated 2024-12-04 · CVE-2024-45495

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: MSA FieldServer Gateway versions 5.0.0 through 6.5.2

Description: The issue allows cross-origin WebSocket hijacking. This means that an attacker can potentially hijack WebSocket connections from a different origin, which could lead to unauthorized access or control over the affected system.

Recommendations: For versions 5.0.0 through 6.5.2, consider disabling WebSocket functionality until a patch is available to prevent cross-origin hijacking. Restrict access to the MSA FieldServer Gateway to minimize the risk of exploitation. Avoid using the WebSocket protocol in the affected API endpoints until the issue is resolved.

Fix

Origin Validation Error

Weakness Enumeration

CWE-346

Related Identifiers

CVE-2024-45495

Affected Products

Fieldserver Gateway

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-45495 · Security Note
• https://us.msasafety.com/fieldserver · Note
• https://us.msasafety.com/security-notices · Note
• https://twitter.com/VulmonFeeds/status/1862421723968139372 · Twitter Post
• https://twitter.com/CVEnew/status/1862364580728500398 · Twitter Post