CVE-2022-2825

Опубликовано: 29 мар. 2023

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

Ссылки

https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-10
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-22-1455/
Third Party Advisory
VDB Entry
https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-10
Third Party Advisory
US Government Resource
https://www.zerodayinitiative.com/advisories/ZDI-22-1455/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ge:industrial_gateway_server:*:*:*:*:*:*:*:*

Версия до 7.612 (исключая)

cpe:2.3:a:ptc:kepware_kepserverex:*:*:*:*:*:*:*:*

Версия до 6.12 (исключая)

cpe:2.3:a:ptc:opc-aggregator:*:*:*:*:*:*:*:*

Версия до 6.12 (исключая)

cpe:2.3:a:ptc:thingworx_industrial_connectivity:-:*:*:*:*:*:*:*

cpe:2.3:a:ptc:thingworx_kepware_edge:*:*:*:*:*:*:*:*

Версия до 1.4 (исключая)

cpe:2.3:a:ptc:thingworx_kepware_server:*:*:*:*:*:*:*:*

Версия до 6.12 (исключая)

cpe:2.3:a:rockwellautomation:kepserver_enterprise:*:*:*:*:*:*:*:*

Версия до 6.12 (исключая)

cpe:2.3:a:softwaretoolbox:top_server:*:*:*:*:*:*:*:*

Версия до 6.12 (исключая)

EPSS

Процентиль: 70%

0.00642

Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121

Связанные уязвимости

GHSA-6rww-x4m5-6j62

CVSS3: 9.8

github

почти 3 года назад

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX V6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

BDU:2022-05394

CVSS3: 9.1

fstec

больше 3 лет назад

Уязвимость программного обеспечения OPC-серверов Kepware KEPServerEX, ThingWorkx Kepware Server, ThingWorx Industrial Connectivity, ThingWorx Kepware Edge и OPC-аггрегатора PTC OPC-Aggregator, связанная с переполнением буфера в стеке, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации или вызвать отказ в обслуживании

EPSS

Процентиль: 70%

0.00642

Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-121