CVE-2021-43933
Assigner: icscert
Published: 2022-04-19T00:00:00
State: PUBLISHED
affected: product: ROBOGUIDE
vendor: FANUC
versions: lessThan: v9.40083.00.05 (Rev T)
status: affected
version: All
versionType: custom
credits: value: Sharon Brizinov with Claroty reported these vulnerabilities to CISA.
datePublic: 2022-04-19T00:00:00
descriptions: value: The affected product is vulnerable to a network-based attack by threat actors sending unimpeded requests to the receiving server, which could cause a denial-of-service condition due to lack of heap memory resources.
metrics: cvssV3_1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.1
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:N/A:H
version: 3.1
problemTypes: descriptions: cweId: CWE-400
description: CWE-400 Uncontrolled Resource Consumption
type: CWE
solutions: value: FANUC has created a new version to address these vulnerabilities. Users may obtain and install the new version by downloading ROBOGUIDE v9 Rev U or higher from the FANUC or FANUC America website (login required).
source: advisory: ICSA-22-109-03
discovery: EXTERNAL
title: ICSA-22-109-03 FANUC ROBOGUIDE Simulation Platform
x_generator: engine: Vulnogram 0.0.9