nvd-json-data-feeds/CVE-2023/CVE-2023-47xx/CVE-2023-4701.json

{
  "id": "CVE-2023-4701",
  "sourceIdentifier": "info@cert.vde.com",
  "published": "2023-09-13T14:15:09.297",
  "lastModified": "2023-09-19T08:15:57.143",
  "vulnStatus": "Modified",
  "descriptions": [
    {
      "lang": "en",
      "value": "A Improper Privilege Management vulnerability through an incorrect use of privileged APIs in CodeMeter Runtime versions prior to 7.60c allow a local, low privileged attacker to use an API call for escalation of privileges in order gain full admin access on the host system."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de Gesti\u00f3n de Privilegios Inadecuada a trav\u00e9s de un uso incorrecto de API privilegiadas en versiones de CodeMeter Runtime anteriores a 7.60c permite a un atacante local con pocos privilegios utilizar una llamada API para escalar privilegios con el fin de obtener acceso completo de administrador en el sistema host."
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "info@cert.vde.com",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      },
      {
        "source": "nvd@nist.gov",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH",
          "baseScore": 7.8,
          "baseSeverity": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 5.9
      }
    ]
  },
  "weaknesses": [
    {
      "source": "info@cert.vde.com",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-269"
        }
      ]
    },
    {
      "source": "nvd@nist.gov",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:wibu:codemeter_runtime:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "7.60c",
              "matchCriteriaId": "5F783582-7E13-457E-96E9-8FD2D58580F5"
            }
          ]
        }
      ]
    },
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:oseon:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.0.0",
              "versionEndIncluding": "3.0.22",
              "matchCriteriaId": "6BCF0613-5F59-4DAA-9DDB-A9322892353A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:programmingtube:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.0.1",
              "versionEndIncluding": "4.6.3",
              "matchCriteriaId": "9648C643-3213-4D0B-A3E0-6C4A092E8DAE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:teczonebend:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "18.02.r8",
              "versionEndIncluding": "23.06.01",
              "matchCriteriaId": "56F0DB5E-5F18-4DA4-9488-242351FE5994"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:tops_unfold:05.03.00.00:*:*:*:*:*:*:*",
              "matchCriteriaId": "926A92BB-2001-4176-9F73-F7F40F4D58CE"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:topscalculation:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "14.00",
              "versionEndIncluding": "22.00.00",
              "matchCriteriaId": "903A6767-5E6D-4E98-A756-A3FC99BAF13F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trumpflicenseexpert:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.5.2",
              "versionEndIncluding": "1.11.1",
              "matchCriteriaId": "54F8DF4D-3C69-4117-88A4-9C0F6838C7DD"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutops:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "08.00",
              "versionEndIncluding": "12.01.00.00",
              "matchCriteriaId": "8360F8C5-1F88-420F-91B2-C75EC8A97A0C"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutops_cell_classic:*:*:*:*:*:*:*:*",
              "versionEndIncluding": "09.09.02",
              "matchCriteriaId": "3240055F-E26E-4BE9-89A9-D50A6FA5E8F1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutops_cell_sw48:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "01.00",
              "versionEndIncluding": "02.26.0",
              "matchCriteriaId": "7CD0343C-7A91-4CF7-B70B-CB2569FFE679"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutops_mark_3d:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "01.00",
              "versionEndIncluding": "06.01",
              "matchCriteriaId": "EB6D30E6-031C-4104-A573-2FD3773E1CDF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutopsboost:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "06.00.23.00",
              "versionEndIncluding": "16.0.22",
              "matchCriteriaId": "B55ED3C4-B111-4A8C-BB9F-A50FCCC38432"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutopsfab:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "15.00.23.00",
              "versionEndIncluding": "22.8.25",
              "matchCriteriaId": "A4180D87-1915-4868-9328-D310282DD7C4"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutopsfab_storage_smallstore:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "14.06.20",
              "versionEndIncluding": "20.04.20.00",
              "matchCriteriaId": "3C7823FE-A87C-494B-AB35-AB2830884282"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutopsprint:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "00.06.00",
              "versionEndIncluding": "01.00",
              "matchCriteriaId": "A257AA96-76DA-47CC-A3BA-3CCFB719C62E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutopsprintmultilaserassistant:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "01.02",
              "matchCriteriaId": "607CE0A6-C1CB-4B30-A7C7-FFEDF8DB0DA1"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:trutopsweld:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "7.0.198.241",
              "versionEndIncluding": "9.0.28148.1",
              "matchCriteriaId": "1561DCB8-AEAF-45A8-9F6F-EEB6A49452C9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:trumpf:tubedesign:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "08.00",
              "versionEndIncluding": "14.06.150",
              "matchCriteriaId": "D88C313D-95E2-44EA-A895-F4CA659A5846"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf",
      "source": "info@cert.vde.com",
      "tags": [
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2023-030/",
      "source": "info@cert.vde.com"
    },
    {
      "url": "https://cert.vde.com/en/advisories/VDE-2023-031/",
      "source": "info@cert.vde.com",
      "tags": [
        "Third Party Advisory"
      ]
    }
  ]
}