PT-2023-19960

CVE-2023-25177

·

Published

2023-06-01

·

Updated

2023-06-14

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions CNCSoft-B DOPSoft versions 1.0.0.4 and prior
Description The issue is related to a stack-based buffer overflow, which could allow an attacker to execute arbitrary code.
Recommendations For versions 1.0.0.4 and prior, update to a version that fixes the stack-based buffer overflow issue. As a temporary workaround, consider restricting access to the DOPSoft application to minimize the risk of exploitation.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-121: Stack-based Buffer Overflow
Related identifiers
CVE-2023-25177
ZDI-23-781
ZDI-23-782
ZDI-23-783
ZDI-23-784
ZDI-23-785
ZDI-23-786
ZDI-23-787
ZDI-23-788
ZDI-23-789
ZDI-23-790
ZDI-23-791
ZDI-23-792
ZDI-23-793
ZDI-23-794
ZDI-23-795
ZDI-23-796
ZDI-23-797
ZDI-23-798
ZDI-23-799
ZDI-23-800
ZDI-23-801
ZDI-23-802
ZDI-23-803
ZDI-23-804
ZDI-23-805
ZDI-23-806
ZDI-23-807
ZDI-23-808
ZDI-23-809
ZDI-23-810
ZDI-23-812
ZDI-23-813
ZDI-23-814
ZDI-23-815
ZDI-23-816
ZDI-23-817
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com