« Volver al listado

CVE-2023-24613

Estado: ModificadaMedia (4.9)—

The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend binary file that handles the user interface to a cause denial of service attack. This is fixed in AG 9.4.0.481.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Arraynetworks — Arrayos AG

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-24613",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-24613",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-03-26T14:53:45.920387Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.2
      },
      {
        "type": "Secondary",
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.9,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 1.2
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2023-02-03T02:15:07.997",
  "references": [
    {
      "url": "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_UI_Stack_Overflow_Vulnerability_ID-128285_V1.0.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.arraynetworks.net/prx/001/http/supportportal.arraynetworks.net/documentation/FieldNotice/Array_Networks_Security_Advisory_for_UI_Stack_Overflow_Vulnerability_ID-128285_V1.0.pdf",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    },
    {
      "type": "Secondary",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The user interface of Array Networks AG Series and vxAG through 9.4.0.470 could allow a remote attacker to use the gdb tool to overwrite the backend function call stack after accessing the system with administrator privileges. A successful exploit could leverage this vulnerability in the backend binary file that handles the user interface to a cause denial of service attack. This is fixed in AG 9.4.0.481."
    },
    {
      "lang": "es",
      "value": "La interfaz de usuario de Array Networks AG Series y vxAG hasta la versión 9.4.0.470 podría permitir a un atacante remoto utilizar la herramienta gdb para sobrescribir la pila de llamadas de funciones backend después de acceder al sistema con privilegios de administrador. Un exploit exitoso podría aprovechar esta vulnerabilidad en el archivo binario backend que maneja la interfaz de usuario para provocar un ataque de denegación de servicio. Esto se soluciona en AG 9.4.0.481."
    }
  ],
  "lastModified": "2026-06-17T05:39:39.737",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:arraynetworks:arrayos_ag:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "074EC86B-4746-4E34-AB53-E6437C22ED25",
              "versionEndIncluding": "9.4.0.470"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EBE11A77-8C2F-46CA-87BA-47624380FFC1"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1000t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5ED51E1F-3155-40C6-B61C-73D6A9F64987"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1000v5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F0BC33CF-FA0B-4556-B11E-61FF9B14880A"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1100v5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A9C8C9AE-AF59-4E5A-93CD-A394F1A31FA0"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1150:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5E025A9D-6B7C-42B6-95EA-0A5726A919F4"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1200:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0771D54C-15DF-403C-8CFA-B1E7D0136F50"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1200v5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7C9F6B87-E3D2-419A-B086-B981EF912F80"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D385DBD0-C4A9-4168-82C2-832E0E40F42D"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1500fips:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "01569AB3-736D-47FE-86DD-F08ACDDCD11E"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1500v5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "22E45185-071F-414A-AF78-4739F15A1D93"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C6F0988E-5E75-486A-9229-956D38A51C35"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:ag1600v5:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1D09E2CC-C1B5-40DC-AD1A-7C6AB20525DC"
            },
            {
              "criteria": "cpe:2.3:h:arraynetworks:vxag:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6E149796-E3D7-4FAF-AB64-8D273E701861"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}