Skip to content
Sign in
8.4 High

CVE-2023-27285 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds…

Description

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248625.

Affected products and versions

Product Affected versions Fixed in
Aspera Connect 4.2.5 No fix stated
Aspera Cargo 4.2.5 No fix stated

Other CVEs of Aspera Connect

The 3 CVEs of Aspera Connect →
CVE-2023-22862 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method… 5.9 Medium CVE-2020-4545 IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper… 7.8 High
Track this CVE