Lucene search

[email protected]CVE-2023-5908

HistoryNov 30, 2023 - 10:15 p.m.

CVE-2023-5908

2023-11-3022:15:09

CWE-120

CWE-122

[email protected]

web.nvd.nist.gov

cve-2023-5908

kepserverex

buffer overflow

vulnerability

nvd

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

7.6 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

29.5%

JSON

KEPServerEX is vulnerable to a buffer overflow which may allow an attacker to crash the product being accessed or leak information.

CPENameOperatorVersion
ge:industrial_gateway_serverge industrial gateway serverle7.614
ge:industrial_gateway_serverge industrial gateway servereq7.68
ge:industrial_gateway_serverge industrial gateway servereq7.66
ge:industrial_gateway_serverge industrial gateway servereq7.612
ge:industrial_gateway_serverge industrial gateway servereq7.68.804
ge:industrial_gateway_serverge industrial gateway servereq7.68.839.0
ptc:keepserverexptc keepserverexle6.14.263.0
ptc:opc-aggregatorptc opc-aggregatorle6.14
ptc:opc-aggregatorptc opc-aggregatoreq6.12
ptc:opc-aggregatorptc opc-aggregatoreq-

CPE	Name	Operator	Version
ge:industrial_gateway_server	ge industrial gateway server	le	7.614
ge:industrial_gateway_server	ge industrial gateway server	eq	7.68
ge:industrial_gateway_server	ge industrial gateway server	eq	7.66
ge:industrial_gateway_server	ge industrial gateway server	eq	7.612
ge:industrial_gateway_server	ge industrial gateway server	eq	7.68.804
ge:industrial_gateway_server	ge industrial gateway server	eq	7.68.839.0
ptc:keepserverex	ptc keepserverex	le	6.14.263.0
ptc:opc-aggregator	ptc opc-aggregator	le	6.14
ptc:opc-aggregator	ptc opc-aggregator	eq	6.12
ptc:opc-aggregator	ptc opc-aggregator	eq	-

Rows per page:

1-10 of 521

References

www.cisa.gov/news-events/ics-advisories/icsa-23-334-03

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

7.6 High

AI Score

Confidence

Low

6.4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

0.001 Low

EPSS

Percentile

29.5%

JSON

Related for CVE-2023-5908

cvelist1 prion1 ics1