CVE-2023-24613 : The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb t

The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend binary file that handles the user interface to a cause denial of service attack. This is fixed in AG 9.4.0.481.

Published 2023-02-03 02:15:08

Updated 2023-02-10 16:14:30

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory CorruptionDenial of service

Exploit prediction scoring system (EPSS) score for CVE-2023-24613

EPSS FAQ

0.14%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 51 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-24613

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.9	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H	1.2	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

Products affected by CVE-2023-24613

Arraynetworks » Arrayos Ag
Versions up to, including, (<=) 9.4.0.470
cpe:2.3:o:arraynetworks:arrayos_ag:*:*:*:*:*:*:*:*
Matching versions
When used together with: Arraynetworks » Ag1000 » Version: N/A
When used together with: Arraynetworks » Ag1000t » Version: N/A
When used together with: Arraynetworks » Ag1000v5 » Version: N/A
When used together with: Arraynetworks » Ag1100v5 » Version: N/A
When used together with: Arraynetworks » Ag1150 » Version: N/A
When used together with: Arraynetworks » Ag1200 » Version: N/A
When used together with: Arraynetworks » Ag1200v5 » Version: N/A
When used together with: Arraynetworks » Ag1500 » Version: N/A
When used together with: Arraynetworks » Ag1500fips » Version: N/A
When used together with: Arraynetworks » Ag1500v5 » Version: N/A
When used together with: Arraynetworks » Ag1600 » Version: N/A
When used together with: Arraynetworks » Ag1600v5 » Version: N/A
When used together with: Arraynetworks » Vxag » Version: N/A

Vulnerability Details : CVE-2023-24613

Exploit prediction scoring system (EPSS) score for CVE-2023-24613

CVSS scores for CVE-2023-24613

CWE ids for CVE-2023-24613

References for CVE-2023-24613

Products affected by CVE-2023-24613