Lucene search
MitreCVE-2023-33375HistoryAug 04, 2023 - 6:15 p.m.
CVE-2023-33375
2023-08-0418:15:12
CWE-787
mitre
web.nvd.nist.gov
20
cve-2023-33375
connected io
stack-based buffer overflow
vulnerability
communication protocol
attackers
devices
nvd
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
56.8%
Connected IO v2.1.0 and prior has a stack-based buffer overflow vulnerability in its communication protocol, enabling attackers to take control over devices.
Affected configurations
Node
connectedioconnected_ioRange≤2.1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| connectedio | connected_io | * | cpe:2.3:a:connectedio:connected_io:*:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2023-33375
2023-08-04 18:15:12
prion
prion
Stack overflow
2023-08-04 18:15:00
cvelist
cvelist
CVE-2023-33375
2023-08-04 00:00:00
thn
thn
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.7
Confidence
High
EPSS
0.002
Percentile
56.8%
Related for CVE-2023-33375