Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2023-32615
HistorySep 05, 2023 - 5:15 p.m.

CVE-2023-32615

2023-09-0517:15:08
CWE-610
CWE-73
[email protected]
web.nvd.nist.gov
2
file write vulnerability
oas engine
configuration functionality
open automation software
arbitrary file creation
arbitrary file overwrite
network requests
attacker
sequence of requests
trigger vulnerability

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

30.7%

JSON

A file write vulnerability exists in the OAS Engine configuration functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

Affected configurations

Nvd
Node
openautomationsoftwareoas_platformMatch18.00.0072
VendorProductVersionCPE
openautomationsoftwareoas_platform18.00.0072cpe:2.3:a:openautomationsoftware:oas_platform:18.00.0072:*:*:*:*:*:*:*

Related

cve 1
prion 1
cvelist 1
talos 1
vulnrichment 1
talosblog 2
cve
cve
CVE-2023-32615
2023-09-05 17:15:08
prion
prion
Arbitrary file deletion
2023-09-05 17:15:00
cvelist
cvelist
CVE-2023-32615
2023-09-05 16:15:04
talos
talos
Open Automation Software OAS Platform OAS Engine configuration file write vulnerability
2023-09-05 00:00:00
vulnrichment
vulnrichment
CVE-2023-32615
2023-09-05 16:15:04
talosblog
talosblog
OAS Engine Deep Dive: Abusing low-impact vulnerabilities to escalate privileges
2024-01-31 17:00:46
Eight vulnerabilities in Open Automation Software Platform could lead to information disclosure, improper authentication
2023-09-06 16:46:50

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

30.7%

JSON
Related for NVD:CVE-2023-32615
cve1prion1cvelist1talos1vulnrichment1talosblog2