Nataliya Tlyapova

تتمثل المشكلة في تجاوز سعة المخزن المؤقت القائم على المكدس (Stack-based Buffer Overflow)، مما يسمح للمهاجمين عن بُعد غير المصادق عليهم بتنفيذ تعليمات برمجية عشوائية على الجهاز. ويمكن للمهاجمين عن بُعد استغلال هذه الثغرة دون الحاجة إلى المصادقة.

تتعلق المشكلة بثغرة أمنية تتمثل في «تجاوز سعة المخزن المؤقت» (Buffer Overflow) في الـ«هياب» (Heap) في CL5708IM، مما يسمح للمهاجمين عن بُعد غير المصادق عليهم باستغلال هذه الثغرة وتنفيذ هجوم «حرمان من الخدمة» (DoS).

المشكلة هي ثغرة أمنية تتمثل في تجاوز سعة المخزن المؤقت (Buffer Overflow) القائم على المكدس، مما يسمح للمهاجمين عن بُعد غير المصادق عليهم باستغلال هذه الثغرة لتنفيذ تعليمات برمجية عشوائية على الجهاز.

تتعلق هذه الثغرة بـ«تجاوز سعة المخزن المؤقت» (Buffer Overflow) قائم على المكدس، مما يسمح للمهاجمين عن بُعد غير المصادق عليهم بتنفيذ تعليمات برمجية عشوائية على الجهاز.

تتمثل المشكلة في ثغرة أمنية تتعلق بتجاوز سعة المخزن المؤقت (Buffer Overflow) في الذاكرة المؤقتة (Heap)، مما يسمح للمهاجمين عن بُعد غير المصادق عليهم باستغلال هذه الثغرة لتنفيذ هجوم رفض الخدمة.

Name of the Vulnerable Software and Affected Versions: CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50 CAMS for HIS CENTUM VP versions R4.01.00 through R6.07.00 CAMS for HIS B/M9000CS versions R5.04.01 through R5.05.01 CAMS for HIS B/M9000 VP versions R6.01.01 through R8.03.01 Description: The issue is related to a directory traversal vulnerability in the CAMS for HIS component, which is associated with inadequate path name checking. This allows a remote unauthenticated attacker to create or overwrite arbitrary files and run arbitrary commands via unspecified vectors. Recommendations: For CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50, update to a version outside of this range to resolve the issue. For CAMS for HIS CENTUM VP versions R4.01.00 through R6.07.00, update to a version outside of this range to resolve the issue. For CAMS for HIS B/M9000CS versions R5.04.01 through R5.05.01, update to a version outside of this range to resolve the issue. For CAMS for HIS B/M9000 VP versions R6.01.01 through R8.03.01, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the CAMS for HIS component to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50 CENTUM VP versions R4.01.00 through R6.07.00 B/M9000CS versions R5.04.01 through R5.05.01 B/M9000 VP versions R6.01.01 through R8.03.01 Description: The issue allows a remote unauthenticated attacker to bypass authentication and send altered communication packets. This is related to a lack of authentication when interacting via a specialized protocol, which can enable an unauthorized remote attacker to interact with the server. Recommendations: For CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50, update to a version outside of this range to mitigate the risk. For CENTUM VP versions R4.01.00 through R6.07.00, update to a version outside of this range to mitigate the risk. For B/M9000CS versions R5.04.01 through R5.05.01, update to a version outside of this range to mitigate the risk. For B/M9000 VP versions R6.01.01 through R8.03.01, update to a version outside of this range to mitigate the risk. As a temporary workaround, consider restricting access to the specialized protocol to minimize the risk of exploitation.