No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
Credit: Rockwell Automation
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2019-9893 | CWE-1357 Reliance on Insufficiently Trustworthy Component | 9.8 Critical |
DataMosaix Private Cloud utilizes libseccomp, which contains a vulnerability in versions 2.4.0 and earlier that does not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE). This vulnerability could lead to bypassing seccomp filters and potential privilege escalations. If exploited, a malicious actor could perform a remote code execution. Mitigation: Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible. Mitigation: Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability. ↗ Mitigation: For more information about this issue, please see the advisory on the Rockwell Automation security page. ↗ Affected, fixed & timelineAffected:
|
| CVE-2019-17543 | CWE-787 Out-of-bounds Write | 8.1 High |
DataMosaix Private Cloud utilizes LZ4 which contains a heap-based buffer overflow vulnerability in versions before 1.9.2 (related to LZ4_compress_destSize), that affects applications that call LZ4_compress_fast with a large input. This issue can also lead to data corruption. If exploited, a malicious actor could perform a remote code execution. Mitigation: Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible. Mitigation: Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability. ↗ Mitigation: For more information about this issue, please see the advisory on the Rockwell Automation security page. ↗ Affected, fixed & timelineAffected:
|
| CVE-2019-18276 | CWE-273 Improper Check for Dropped Privileges | 7.8 High |
DataMosaix Private Cloud utilizes shell.c which contains a vulnerability in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. A threat actor with command execution in the shell can use "enable -f" for runtime loading to gain privileges. If exploited, a malicious actor could perform a remote code execution. Mitigation: Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible. Mitigation: Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability. ↗ Mitigation: For more information about this issue, please see the advisory on the Rockwell Automation security page. ↗ Affected, fixed & timelineAffected:
|
| CVE-2019-14855 | CWE-326 Inadequate Encryption Strength | 7.5 High |
DataMosaix Private Cloud utilizes GnuPG which contains a certificate signature vulnerability found in the SHA-1 algorithm. A threat actor could use this weakness to create forged certificate signatures. If exploited, a malicious user could view customer data. Mitigation: Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible. Mitigation: Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability. ↗ Mitigation: For more information about this issue, please see the advisory on the Rockwell Automation security page. ↗ Affected, fixed & timelineAffected:
|
| CVE-2019-19244 | CWE-1357 Reliance on Insufficiently Trustworthy Component | 7.5 High |
DataMosaix Private Cloud utilizes SQLite 3.30.1 which contains a vulnerability in sqlite3Select in select.c that allows a crash if a subselect uses both DISTINCT and window functions and has certain ORDER BY usage. If exploited, a malicious actor could perform a denial of service, which would require the use to restart the software to recover it. Mitigation: Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible. Mitigation: Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability. ↗ Mitigation: For more information about this issue, please see the advisory on the Rockwell Automation security page. ↗ Affected, fixed & timelineAffected:
|
| CVE-2019-9923 | CWE-476 NULL Pointer Dereference | 7.5 High |
DataMosaix Private Cloud utilizes GNU Tar, which contains a vulnerability in pax_decode_header in sparse.c in versions before 1.32. pax_decode_header has a NULL pointer dereference when parsing certain archives that have malformed extended headers. If exploited, a malicious actor could perform a denial of service, which would require the use to restart the software to recover it. Mitigation: Rockwell Automation has addressed this issue in version v7.09 and encourages users to update to the newest available version. Rockwell Automation encourages users of the affected software to apply risk mitigations, if possible. Mitigation: Rockwell Automation encourages users to implement security best practices to minimize the risk of the vulnerability. ↗ Mitigation: For more information about this issue, please see the advisory on the Rockwell Automation security page. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2019-18276 | 7.8 High | n/a n/a An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal… |
| CVE-2019-9923 | 7.5 High | n/a n/a pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that have malformed extended header… |
| CVE-2019-14855 | 5.3 Medium | Red Hat gnupg2 A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An attacker could use this weakness… |
| CVE-2019-17543 | — | n/a n/a LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applications that call LZ4_compress_fa… |
| CVE-2019-19244 | — | n/a n/a sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and also has certain ORDER BY usag… |
| CVE-2019-9893 | — | n/a n/a libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (LT, GT, LE, GE), which might a… |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.