CVE-2022-2825

CRITICAL

9.8

Descricao

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-18411.

Detalhes CVE

Pontuacao CVSS v3.19.8

SeveridadeCRITICAL

Vetor CVSSCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Vetor de ataqueNETWORK

ComplexidadeLOW

Privilegios necessariosNONE

Interacao do usuarioNONE

Publicado3/29/2023

Ultima modificacao2/18/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

ge:industrial_gateway_serverptc:kepware_kepserverexptc:opc-aggregatorptc:thingworx_industrial_connectivityptc:thingworx_kepware_edgeptc:thingworx_kepware_serverrockwellautomation:kepserver_enterprisesoftwaretoolbox:top_server

Fraquezas (CWE)

CWE-121

Referencias

https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-10(zdi-disclosures@trendmicro.com)

https://www.zerodayinitiative.com/advisories/ZDI-22-1455/(zdi-disclosures@trendmicro.com)

https://www.cisa.gov/uscert/ics/advisories/icsa-22-242-10(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-22-1455/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.