PT-2024-5381 · Omnivise · Omnivise T3000 R8.2 Sp3+2

Published 2024-06-21 · Updated 2024-09-20 · CVE-2024-38879

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Omnivise T3000 Application Server R9.2 (All versions) Omnivise T3000 R8.2 SP3 (All versions) Omnivise T3000 R8.2 SP4 (All versions)

Description The issue is related to insufficient input validation, which can be exploited by a remote attacker to bypass authentication and gain unauthorized access to protected information. The affected system exposes an internal application's port on the public network interface, allowing direct access to the exposed application.

Recommendations For Omnivise T3000 Application Server R9.2, restrict access to the exposed internal application to minimize the risk of exploitation. For Omnivise T3000 R8.2 SP3, consider disabling the exposed port on the public network interface until a patch is available. For Omnivise T3000 R8.2 SP4, avoid using the affected system for sensitive operations until the issue is resolved.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-06015

CVE-2024-38879

Affected Products

Omnivise T3000 Application Server R9.2

Omnivise T3000 R8.2 Sp3

Omnivise T3000 R8.2 Sp4

References · 8

• https://cert-portal.siemens.com/productcert/html/ssa-857368.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-06015 · Security Note
• https://osv.dev/vulnerability/CVE-2024-38879 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-38879 · Security Note
• https://t.me/cvedetector/2349 · Telegram Post
• https://vuldb.com/ru/?id.273497 · Note
• https://t.me/cvenotify/95558 · Telegram Post
• http://seclists.org/fulldisclosure/2024/Nov/5 · Note