Lucene search

K
cve[email protected]CVE-2023-47150
HistoryMar 26, 2024 - 2:15 p.m.

CVE-2023-47150

2024-03-2614:15:08
CWE-400
web.nvd.nist.gov
36
ibm
cca
denial of service
aes
nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

IBM Common Cryptographic Architecture (CCA) 7.0.0 through 7.5.36 could allow a remote user to cause a denial of service due to incorrect data handling for certain types of AES operations. IBM X-Force ID: 270602.

Affected configurations

Vulners
Node
ibmcommon_cryptographic_architectureRange7.0.07.5.36
VendorProductVersionCPE
ibmcommon_cryptographic_architecture*cpe:2.3:a:ibm:common_cryptographic_architecture:*:*:*:*:*:*:*:*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Common Cryptographic Architecture",
    "vendor": "IBM",
    "versions": [
      {
        "lessThanOrEqual": "7.5.36",
        "status": "affected",
        "version": "7.0.0",
        "versionType": "semver"
      }
    ]
  }
]

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.2 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVE-2023-47150