Rockwell Automation FactoryTalk Activation
Advisory ansehen veröffentlicht 2024-01-04
Successful exploitation of these vulnerabilities could result in a buffer overflow and allow the attacker to gain full access to the system.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-38545US | critical9.8 | Exploit | ||
This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy
handshake.
When curl is asked to pass along the host name to the SOCKS5 proxy to allow
that to resolve the ad… | ||||
| CVE-2023-3935US | — | — | ||
A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-24-004-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSA-24-004-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationFactory Talk Activation Manager
Rockwell Automation encourages users to implement their suggested security best practices to minimize risk of the vulnerability.
- MitigationFactory Talk Activation Manager
Rockwell Automation encourages users to implement their suggested security best practices to minimize risk of the vulnerability.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan