CVE-2023-7104

highPriorität · verfolgen · 30EPSS 0.015 · 73. PerzentilCHDEEUNLRUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.46% (73rd) EPSS
CVSS 7.3 · high
Is it mine?
215 products
Prüfe deine Angriffsfläche
Who says so?
11 sources
cnnvd · enisa_euvd · fstec_bdu · abb_psirt

EPSS · bewertet 2026-10-22

A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

  • BehobenAbility Camera Connectabb_psirt

    The problem is corrected in the following product versions: - ABB Ability Camera Connect 2.0.0.49. The easiest path to mitigate the problem is an update of ABB Ability Camera Connect system by the customer. ABB recommends that customers apply the update at earliest convenience.

  • BehobenAutomation Studioabb_psirt

    The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • BehobenRUGGEDCOM CROSSBOW Station Access Controller (SAC)siemens_psirt

    Update to V5.6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109976555/
  • BehobenSIDIS Primesiemens_psirt

    Update to V4.0.700 or later version

  • BehobenSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt

    Update to V1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109827684/
  • BehobenSINEC INSsiemens_psirt

    Update to V1.0 SP2 Update 3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109975745/
  • Behobenphoenix_contact_psirt

    Update to the latest 2024.0.6 LTS Firmware Release. PHOENIX CONTACT recommends to always use an up-to-date version of the PLCnext Engineer.

  • BehobenSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot

    Update to V1.1 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109827684/
  • BehobenRUGGEDCOM CROSSBOW Station Access Controller (SAC)cisa_csaf_ot

    Update to V5.6 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109976555/
  • BehobenSINEC INScisa_csaf_ot

    Update to V1.0 SP2 Update 3 or later version

    https://support.industry.siemens.com/cs/ww/en/view/109975745/
  • BehobenSIDIS Primecisa_csaf_ot

    Update to V4.0.700 or later version

  • BehobenB&R Automation Studiocisa_csaf_ot

    The problem is corrected in the following product versions: B&R Automation Studio 6.5 B&R recommends that customers apply the update at earliest convenience. The process to install updates is described in the user manual. The step to identify the installed product version is described in the user manual.

  • MitigationAbility Camera Connectabb_psirt

    This vulnerability affects the SQLite session extension (FTS3), which is an optional component: - Component Usage: Camera Connect's implementation do not utilize the SQLite session extension functionality, rendering this vulnerability non-applicable to the actual deployment. - Adjacent Network Attack: The CVSS vector indicates Adjacent Network access (AV:A) is required, meaning the attacker must be on the same local network segment. In OT environments, network segmentation at ISA-95 Level 2 restricts access to authorized personnel only. - Authentication Required: Low privilege credentials (PR:L) are still required to exploit this vulnerability, providing an additional barrier in Camera Connect's access-controlled environment. - Limited Impact: The CVSS score of 5.5 (MEDIUM) reflects limited impact to confidentiality, integrity, and avail-ability (C:L/I:L/A:L). - Extension-Specific: The vulnerability is in the make all test handler of the session extension, which is typically not used in production deployments. Camera Connect's restricted operational environment and limited use of optional SQLite features significantly reduce the exploitability of this vulnerability.

  • MitigationAutomation Studioabb_psirt

    Refer to section “General security recommendations” for advice on how to keep your system secure.

  • MitigationSIMATIC S7-1500 TM MFP - GNU/Linux subsystemsiemens_psirt

    Only build and run applications from trusted sources

  • MitigationB&R Automation Studiocisa_csaf_ot

    Refer to section “General security recommendations” for advice on how to keep your system secure.

  • WorkaroundSIMATIC S7-1500 TM MFP - GNU/Linux subsystemcisa_csaf_ot

    Only build and run applications from trusted sources

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.3
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5.2–7.3

v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.4
v2.05.2mediumAV:A/AC:L/Au:S/C:P/I:P/A:Psecondary · Phoenix Contact PSIRT DE
v2.05.2mediumAV:A/AC:L/Au:S/C:P/I:P/A:Psecondary · cna@vuldb.comAusnutzbarkeit 5.1 · Auswirkung 6.4
v3.05.5mediumCVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Phoenix Contact PSIRT DE
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · NCSC-NL NL
v3.15.5mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · cna@vuldb.comAusnutzbarkeit 2.1 · Auswirkung 3.4
v3.15.5mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Siemens ProductCERT DE
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:Csecondary · CISA US
v3.15.5mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · Phoenix Contact PSIRT DE
v3.17.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · SICK PSIRT DE
v3.16.7mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:Usecondary · CVSS-BT (t0sche)
v3.15.5mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · ABB PSIRT
v3.15.5mediumCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:Lsecondary · ENISA EU
v3.17.3highAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:Lsecondary · FSTEC (BDU) RU
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: poc · Automatable: no · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-119USprimärCWE-119USCWE-119USCWE-122USCWE-122USCWE-122USCWE-122USCWE-122USCWE-122USCWE-122US
05

betroffene Produkte (215)

Betroffene Produkte und Versionsbereiche.

20 von 215 angezeigt
06

Advisories (21)

Hersteller- und Ökosystem-Meldungen dazu.

  • 4HZM000604ABB Ability Camera Connect Vulnerabilities in outdated 3rd party component (SQLite 3.2.4)2026-03-26csaf · abb_psirtCH

    ABB is aware of public reports of vulnerabilities in a 3rd party dependency SQLite Version 3.2.4 which was delivered together with the installation package of Camera Connect Version 2.0.0.42 and below. An update is available that resolves a privately reported outdated 3rd party component with vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited any of these vulnerabilities in the 3rd party component could potentially compromise the system in different ways.

  • NCSC-2024-0419Kwetsbaarheden verholpen in Oracle JavaNL2024-10-17csaf · ncsc_nlNL

    Oracle heeft kwetsbaarheden verholpen in Java SE en GraalVM.

  • NCSC-2024-0433Kwetsbaarheden verholpen in Siemens productenNL2024-11-12csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als Mendix, RUGGEDCOM, SCALANCE, SIMATIC en SINEC.

  • NCSC-2025-0106Kwetsbaarheden verholpen in Siemens productenNL2025-04-08csaf · ncsc_nlNL

    Siemens heeft kwetsbaarheden verholpen in diverse producten als Industrial Edge Devices, Mendix, SENTRON, SIDIS, SIMATIC, SIPLUS,Insights Hub Private Cloud, Siemens License Server en Solid Edge.

  • SA25P007B&R Automation Studio Update of SQLite version2026-02-18csaf · abb_psirtCH

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution.

  • SCA-2025-0006Vulnerability affecting picoScan and multiScan2025-04-28csaf · sick_psirtDE

    SICK has identified a Denial of Service vulnerability (CVE-2025-32472) in picoScan and multiScan, which can cause the web page to become unresponsive. Due to their architectural design, these products are not affected by the other vulnerabilities listed in this advisory. Currently SICK is not aware of any public exploits specifically targeting the vulnerability. SICK recommends applying the mitigation for CVE-2025-32472.

  • SSA-000297SSA-000297: Multiple SQLite Vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller Before V5.62024-11-12csaf · siemens_psirtDE

    RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

  • SSA-277137SSA-277137: Multiple Vulnerabilities in SIDIS Prime Before V4.0.7002025-04-08csaf · siemens_psirtDE

    SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

  • SSA-794697SSA-794697: Vulnerabilities in the Additional GNU/Linux Subsystem of the SIMATIC S7-1500 TM MFP Before V1.12023-06-13csaf · siemens_psirtDE

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. SIMATIC S7-1500 TM MFP V1.0 is no longer maintained and there won't be any update to the CVE list anymore. Please update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 (https://cert-portal.siemens.com/productcert/html/ssa-265688.html).

  • SSA-915275SSA-915275: Multiple Vulnerabilities in SINEC INS Before V1.0 SP2 Update 32024-11-12csaf · siemens_psirtDE

    SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.

  • VDE-2024-073Phoenix Contact: Multiple Vulnerabilities in PLCnext Firmware2024-12-09csaf · phoenix_contact_psirtDE

    Multiple Linux component vulnerabilities fixed in latest PLCnext Firmware release 2024.0.6 LTS

  • WID-SEC-W-2024-0092Red Hat SQLite: Schwachstelle ermöglicht nicht spezifizierten AngriffDeutsch2024-01-15csaf · cert_bundDE

    Ein entfernter anonymer Angreifer kann eine Schwachstelle in Red Hat SQLite in Enterprise Linux ausnutzen, um einen nicht näher spezifizierten Angriff zu starten.

  • WID-SEC-W-2024-0521IBM MQ: Mehrere SchwachstellenDeutsch2024-02-29csaf · cert_bundDE

    Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in IBM MQ ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.

  • WID-SEC-W-2024-1307Red Hat OpenShift Service Mesh Containers: Mehrere SchwachstellenDeutsch2024-06-06csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh Containers ausnutzen, um Dateien zu manipulieren, einen 'Denial of Service'-Zustand erzuegen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder weitere nicht spezifizierte Angriffe durchzuführen.

  • WID-SEC-W-2026-0180Dell Data Protection Advisor: Mehrere SchwachstellenDeutsch2026-01-20csaf · cert_bundDE

    Ein Angreifer kann mehrere Schwachstellen in Dell Data Protection Advisor ausnutzen, um beliebigen Code auszuführen, einen Denial-of-Service-Zustand zu erzeugen, Sicherheitsmaßnahmen zu umgehen und nicht näher spezifizierte Angriffe zu starten.

  • ICSA-23-166-11Siemens SIMATIC S7-1500 TM MFP Linux Kernel2023-06-13icsa · cisa_csaf_otUS

    Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.0. Siemens has released a new version for SIMATIC S7-1500 TM MFP - GNU/Linux subsystem and recommends to update to the latest version. This advisory lists vulnerabilities for firmware version V1.0 only; for V1.1 refer to Siemens Security Advisory SSA-265688 ( https://cert-portal.siemens.com/productcert/html/ssa-265688.html).

  • ICSA-24-319-01Siemens RUGGEDCOM CROSSBOW2024-11-12icsa · cisa_csaf_otUS

    RUGGEDCOM CROSSBOW Station Access Controller (SAC) contains multiple vulnerabilities in the integrated SQLite component that could allow an attacker to execute arbitrary code or to create a denial of service condition. Siemens has released a new version for RUGGEDCOM CROSSBOW Station Access Controller (SAC) and recommends to update to the latest version.

  • ICSA-24-319-08Siemens SINEC INS2024-11-12icsa · cisa_csaf_otUS

    SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version.

  • ICSA-25-100-02Siemens SIDIS Prime2025-04-08icsa · cisa_csaf_otUS

    SIDIS Prime before V4.0.700 is affected by multiple vulnerabilities in the components OpenSSL, SQLite, Boost C++ Libraries and several Microsoft components as described below. Siemens has released a new version of SIDIS Prime and recommends to update to the latest version.

  • ICSA-26-141-03ABB B&R Automation Studio2026-02-18icsa · cisa_csaf_otUS

    ABB became aware of vulnerability in the product versions listed as affected in the advisory. An update is available that replaces an outdated third-party component. Although no successful exploitation was observed during testing of the affected B&R products, the identified vulnerabilities could present potential attack vectors that might enable unauthorized access, data exposure, or remote code execution.

  • BIT-sqlite-2023-7104SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow2024-03-06vendor · osvUS

    A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/sqlite3session.c of the component make alltest Handler. The manipulation leads to heap-based buffer overflow. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-248999.

07

auch bekannt als (4)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdfstec_bduabb_psirtcert_bundncsc_nlsick_psirtsiemens_psirtphoenix_contact_psirtcisa_csaf_otosvNVDCVE.orgMITRE
veröffentlicht 2023-12-29geändert 2026-10-14
10

Referenzen (31)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan