Exploitation: No known public exploits that specifically target these vulnerabilities have been reported to CISA at this time.
Credit: an anonymous researcher
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2023-38545 | CWE-787 Out-of-bounds Write | 9.8 Critical |
Rockwell Automation FactoryTalk Activation Manager and Studio 5000 Logix Designer uses the affected Wibu-Systems' products which internally use a version of libcurl that is vulnerable to a buffer overflow attack if curl is configured to redirect traffic through a SOCKS5 proxy. A malicious proxy can exploit a bug in the implemented handshake to cause a buffer overflow. If no SOCKS5 proxy has been configured, there is no attack surface. Mitigation: Users of the affected software are encouraged to apply the risk mitigations, if possible: Mitigation: Upgrade to FactoryTalk Activation Manager 5.01 which has been patched to mitigate these issues. Mitigation: For information on how to mitigate security risks on industrial automation control systems see our suggested security best practices. ↗ Affected, fixed & timelineAffected:
Mitigation: Rockwell Automation encourages users to implement their suggested security best practices to minimize risk of the vulnerability. Mitigation: For more information, please see the security advisory from Rockwell Automation |
| CVE-2023-3935 | CWE-787 Out-of-bounds Write | 7.5 High |
Rockwell Automation FactoryTalk Activation Manager and Studio 5000 Logix Designer uses the affected Wibu-Systems' products which contain a heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to Version 7.60b that allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system. Mitigation: Users of the affected software are encouraged to apply the risk mitigations, if possible: Mitigation: Upgrade to FactoryTalk Activation Manager 5.01 which has been patched to mitigate these issues. Mitigation: For information on how to mitigate security risks on industrial automation control systems see our suggested security best practices. ↗ Affected, fixed & timelineAffected:
Mitigation: Rockwell Automation encourages users to implement their suggested security best practices to minimize risk of the vulnerability. Mitigation: For more information, please see the security advisory from Rockwell Automation |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2023-3935 | 9.8 Critical | Wibu CodeMeter Runtime A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achi… |
| CVE-2023-38545 | 8.8 High | curl curl This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake. When curl is asked to pass along the host name to the SOCKS5 proxy … |
Named by the advisory itself. Each CVE links to its tracked detail page.
Each vendor links to its Known Exploited Vulnerabilities catalog page. Only vendors that appear in the KEV catalog are listed, either because the publication cites one of their KEV entries or because it names them directly.