PT-2020-13643
CVE-2020-13656
·
Published
2020-06-12
·
Updated
2020-06-22
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Morgan Stanley Hobbes versions through 2020-05-21
Description
The array implementation in Morgan Stanley Hobbes lacks bounds checking, allowing exploitation of an out-of-bounds (OOB) read/write issue that leads to both local and remote code execution via RPC.
Recommendations
For Morgan Stanley Hobbes versions through 2020-05-21, at the moment, there is no information about a newer version that contains a fix for this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾