Wibu：CodeMeter 运行时容易出现特权 API 错误使用漏洞 (CVE-2023-4701)
CVE编号
CVE-2023-4701利用情况
暂无补丁情况
N/A披露时间
2023-09-01漏洞描述
A Improper Privilege Management vulnerability through an incorrect use of privileged APIs in CodeMeter Runtime versions prior to 7.60c allow a local, low privileged attacker to use an API call for escalation of privileges in order gain full admin access on the host system.解决建议
建议您更新当前系统或软件至最新版，完成漏洞的修复。
参考链接 |
|---|
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | trumpf | oseon | * | From (including) 1.0.0 | Up to (including) 3.0.22 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | programmingtube | * | From (including) 1.0.1 | Up to (including) 4.6.3 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | teczonebend | * | From (including) 18.02.r8 | Up to (including) 23.06.01 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | topscalculation | * | From (including) 14.00 | Up to (including) 22.00.00 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | tops_unfold | 05.03.00.00 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trumpflicenseexpert | * | From (including) 1.5.2 | Up to (including) 1.11.1 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutops | * | From (including) 08.00 | Up to (including) 12.01.00.00 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutopsboost | * | From (including) 06.00.23.00 | Up to (including) 16.0.22 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutopsfab | * | From (including) 15.00.23.00 | Up to (including) 22.8.25 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutopsfab_storage_smallstore | * | From (including) 14.06.20 | Up to (including) 20.04.20.00 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutopsprint | * | From (including) 00.06.00 | Up to (including) 01.00 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutopsprintmultilaserassistant | * | From (including) 01.02 | |||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutopsweld | * | From (including) 7.0.198.241 | Up to (including) 9.0.28148.1 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutops_cell_classic | * | Up to (including) 09.09.02 | |||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutops_cell_sw48 | * | From (including) 01.00 | Up to (including) 02.26.0 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | trutops_mark_3d | * | From (including) 01.00 | Up to (including) 06.01 | ||||
| 运行在以下环境 | |||||||||
| 应用 | trumpf | tubedesign | * | From (including) 08.00 | Up to (including) 14.06.150 | ||||
| 运行在以下环境 | |||||||||
| 应用 | wibu | codemeter_runtime | * | Up to (excluding) 7.60c | |||||
- 攻击路径 本地
- 攻击复杂度 低
- 权限要求 低
- 影响范围 已更改
- 用户交互 无
- 可用性 高
- 保密性 高
- 完整性 高
| CWE-ID | 漏洞类型 |
| CWE-269 | 特权管理不恰当 |
| NVD-CWE-noinfo |
Exp相关链接
版权声明
本站原创文章转载请注明文章出处及链接，谢谢合作！
评论