Логотип exploitDog
bind:CVE-2023-27858
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2023-27858

Количество 3

Количество 3

nvd логотип

CVE-2023-27858

больше 2 лет назад

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application.  The threat-actor could then execute malicious code on the system affecting the confidentiality, integrity, and availability of the product.  The user would need to open a malicious file provided to them by the attacker for the code to execute.

CVSS3: 7.8
EPSS: Низкий
github логотип

GHSA-7hqq-m574-qjp2

больше 2 лет назад

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application.  The threat-actor could then execute malicious code on the system affecting the confidentiality, integrity, and availability of the product.  The user would need to open a malicious file provided to them by the attacker for the code to execute.

CVSS3: 7.8
EPSS: Низкий
fstec логотип

BDU:2023-07347

больше 2 лет назад

Уязвимость программного обеспечения для дискретного моделирования событий и автоматизации Rockwell Automation Arena, связанная с использованием неинициализированного указателя, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2023-27858

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application.  The threat-actor could then execute malicious code on the system affecting the confidentiality, integrity, and availability of the product.  The user would need to open a malicious file provided to them by the attacker for the code to execute.

CVSS3: 7.8
0%
Низкий
больше 2 лет назад
github логотип
GHSA-7hqq-m574-qjp2

Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized code to the software by using an uninitialized pointer in the application.  The threat-actor could then execute malicious code on the system affecting the confidentiality, integrity, and availability of the product.  The user would need to open a malicious file provided to them by the attacker for the code to execute.

CVSS3: 7.8
0%
Низкий
больше 2 лет назад
fstec логотип
BDU:2023-07347

Уязвимость программного обеспечения для дискретного моделирования событий и автоматизации Rockwell Automation Arena, связанная с использованием неинициализированного указателя, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
0%
Низкий
больше 2 лет назад

Уязвимостей на страницу