mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-28 01:02:25 +00:00
300 lines
10 KiB
JSON
300 lines
10 KiB
JSON
{
|
|
"id": "CVE-2023-3935",
|
|
"sourceIdentifier": "info@cert.vde.com",
|
|
"published": "2023-09-13T14:15:09.147",
|
|
"lastModified": "2024-01-25T20:24:58.783",
|
|
"vulnStatus": "Analyzed",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system."
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Una vulnerabilidad de Desbordamiento del B\u00fafer en el servicio de red Wibu CodeMeter Runtime hasta la versi\u00f3n 7.60b permite a un atacante remoto no autenticado lograr RCE y obtener acceso completo al sistema anfitri\u00f3n."
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "info@cert.vde.com",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 9.8,
|
|
"baseSeverity": "CRITICAL"
|
|
},
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 5.9
|
|
},
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Secondary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "NONE",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "HIGH",
|
|
"baseScore": 9.8,
|
|
"baseSeverity": "CRITICAL"
|
|
},
|
|
"exploitabilityScore": 3.9,
|
|
"impactScore": 5.9
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-787"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"source": "info@cert.vde.com",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-787"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:wibu:codemeter_runtime:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "7.60c",
|
|
"matchCriteriaId": "5F783582-7E13-457E-96E9-8FD2D58580F5"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:oseon:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "1.0.0",
|
|
"versionEndIncluding": "3.0.22",
|
|
"matchCriteriaId": "6BCF0613-5F59-4DAA-9DDB-A9322892353A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:programmingtube:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "1.0.1",
|
|
"versionEndIncluding": "4.6.3",
|
|
"matchCriteriaId": "9648C643-3213-4D0B-A3E0-6C4A092E8DAE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:teczonebend:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "18.02.r8",
|
|
"versionEndIncluding": "23.06.01",
|
|
"matchCriteriaId": "56F0DB5E-5F18-4DA4-9488-242351FE5994"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:tops_unfold:05.03.00.00:*:*:*:*:*:*:*",
|
|
"matchCriteriaId": "926A92BB-2001-4176-9F73-F7F40F4D58CE"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:topscalculation:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "14.00",
|
|
"versionEndIncluding": "22.00.00",
|
|
"matchCriteriaId": "903A6767-5E6D-4E98-A756-A3FC99BAF13F"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trumpflicenseexpert:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "1.5.2",
|
|
"versionEndIncluding": "1.11.1",
|
|
"matchCriteriaId": "54F8DF4D-3C69-4117-88A4-9C0F6838C7DD"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutops:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "08.00",
|
|
"versionEndIncluding": "12.01.00.00",
|
|
"matchCriteriaId": "8360F8C5-1F88-420F-91B2-C75EC8A97A0C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutops_cell_classic:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "09.09.02",
|
|
"matchCriteriaId": "3240055F-E26E-4BE9-89A9-D50A6FA5E8F1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutops_cell_sw48:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "01.00",
|
|
"versionEndIncluding": "02.26.0",
|
|
"matchCriteriaId": "7CD0343C-7A91-4CF7-B70B-CB2569FFE679"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutops_mark_3d:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "01.00",
|
|
"versionEndIncluding": "06.01",
|
|
"matchCriteriaId": "EB6D30E6-031C-4104-A573-2FD3773E1CDF"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutopsboost:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "06.00.23.00",
|
|
"versionEndIncluding": "16.0.22",
|
|
"matchCriteriaId": "B55ED3C4-B111-4A8C-BB9F-A50FCCC38432"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutopsfab:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "15.00.23.00",
|
|
"versionEndIncluding": "22.8.25",
|
|
"matchCriteriaId": "A4180D87-1915-4868-9328-D310282DD7C4"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutopsfab_storage_smallstore:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "14.06.20",
|
|
"versionEndIncluding": "20.04.20.00",
|
|
"matchCriteriaId": "3C7823FE-A87C-494B-AB35-AB2830884282"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutopsprint:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "00.06.00",
|
|
"versionEndIncluding": "01.00",
|
|
"matchCriteriaId": "A257AA96-76DA-47CC-A3BA-3CCFB719C62E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutopsprintmultilaserassistant:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "01.02",
|
|
"matchCriteriaId": "607CE0A6-C1CB-4B30-A7C7-FFEDF8DB0DA1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:trutopsweld:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "7.0.198.241",
|
|
"versionEndIncluding": "9.0.28148.1",
|
|
"matchCriteriaId": "1561DCB8-AEAF-45A8-9F6F-EEB6A49452C9"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:trumpf:tubedesign:*:*:*:*:*:*:*:*",
|
|
"versionStartIncluding": "08.00",
|
|
"versionEndIncluding": "14.06.150",
|
|
"matchCriteriaId": "D88C313D-95E2-44EA-A895-F4CA659A5846"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:phoenixcontact:activation_wizard:*:*:*:*:*:moryx:*:*",
|
|
"versionEndIncluding": "1.6",
|
|
"matchCriteriaId": "E8198A71-1EA7-4DAC-8D4F-EB646A0DC635"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:phoenixcontact:e-mobility_charging_suite:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "1.7.0",
|
|
"matchCriteriaId": "2B2B109F-41E0-4CC9-9F9F-F1AD06E1EA77"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:phoenixcontact:fl_network_manager:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "7.0",
|
|
"matchCriteriaId": "C8751F63-3D03-434A-BF4E-67320F6672FD"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:phoenixcontact:iol-conf:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "1.7.0",
|
|
"matchCriteriaId": "907E5EB3-8346-4371-9CFF-0F885CC0529E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:phoenixcontact:module_type_package_designer:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "1.2.0",
|
|
"matchCriteriaId": "C9659319-4AEC-4112-9EAC-7892C0A37AA8"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:phoenixcontact:module_type_package_designer:1.2.0:beta:*:*:*:*:*:*",
|
|
"matchCriteriaId": "BB44DD6D-7685-4346-91BC-30CB9531982A"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:a:phoenixcontact:plcnext_engineer:*:*:*:*:*:*:*:*",
|
|
"versionEndIncluding": "2023.6",
|
|
"matchCriteriaId": "170FABD2-23D5-4885-AA09-B4130F945564"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://cdn.wibu.com/fileadmin/wibu_downloads/security_advisories/AdvisoryWIBU-230704-01-v3.0.pdf",
|
|
"source": "info@cert.vde.com",
|
|
"tags": [
|
|
"Vendor Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://cert.vde.com/en/advisories/VDE-2023-030/",
|
|
"source": "info@cert.vde.com",
|
|
"tags": [
|
|
"Third Party Advisory"
|
|
]
|
|
},
|
|
{
|
|
"url": "https://cert.vde.com/en/advisories/VDE-2023-031/",
|
|
"source": "info@cert.vde.com",
|
|
"tags": [
|
|
"Third Party Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |