CVE-2023-2186
Assigner: trellix
Published: 2023-06-07T06:37:33.280Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: SCADA Data Gateway
vendor: Triangle MicroWorks
versions: status: affected
version: 5.01.03
credits: type: finder
user: 00000000-0000-4000-9000-000000000000
value: Sam Quinn
descriptions: supportingMedia: base64: no
type: text/html
value: On Triangle MicroWorks' SCADA Data Gateway version &lt;= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user can use this format string vulnerability to repeatedly crash the GTWWebMonitor.exe process to DoS the Web Monitor.  Furthermore, an authenticated user can leverage this vulnerability to leak memory from the GTWWebMonitor.exe process. This could be leveraged in an exploit chain to gain code execution.
value: On Triangle MicroWorks' SCADA Data Gateway version <= v5.01.03, an unauthenticated attacker can send a specially crafted broadcast message including format string characters to the SCADA Data Gateway to perform unrestricted memory reads.An unauthenticated user can use this format string vulnerability to repeatedly crash the GTWWebMonitor.exe process to DoS the Web Monitor.  Furthermore, an authenticated user can leverage this vulnerability to leak memory from the GTWWebMonitor.exe process. This could be leveraged in an exploit chain to gain code execution.
impacts: capecId: CAPEC-125
descriptions: value: CAPEC-125 Flooding
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.2
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-134
description: CWE-134 Use of Externally-Controlled Format String
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev