6.5
Moyenne
CVE-2023-27979 A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the…
Description
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could allow the renaming of files in the IGSS project report directory, this could lead to denial of service when an attacker sends specific crafted messages to the Data Server TCP port. Affected Products: IGSS Data Server(IGSSdataServer.exe)(V16.0.0.23040 and prior), IGSS Dashboard(DashBoard.exe)(V16.0.0.23040 and prior), Custom Reports(RMS16.dll)(V16.0.0.23040 and prior).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| IGSS Data Server(IGSSdataServer.exe) 16.0 | premières → 16.0.0.23040 | Pas de correctif indiqué |
| IGSS Dashboard (DashBoard.exe) 16.0 | premières → 16.0.0.23040 | Pas de correctif indiqué |
| Custom Reports (RMS16.dll) 16.0 | premières → 16.0.0.23040 | Pas de correctif indiqué |
Autres CVE de IGSS Data Server(IGSSdataServer.exe)
Les 8 CVE de IGSS Data Server(IGSSdataServer.exe) →
CVE-2023-27977
A CWE-345: Insufficient Verification of Data Authenticity vulnerability exists in the Data Server that could cause…
6.5
Moyenne
CVE-2023-27978
A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an…
7.8
Élevée
CVE-2023-27980
A CWE-306: Missing Authentication for Critical Function vulnerability exists in the Data Server TCP interface that could…
8.8
Élevée
CVE-2023-27981
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that…
7.8
Élevée