CVE-2023-32615

CVSS 3.1 Score 8.1 of 10 (high)

Details

Published Sep 5, 2023
Updated: Sep 8, 2023
CWE ID 610
CWE ID 73

Summary

CVE-2023-32615 is a file write vulnerability identified in the OAS Engine configuration functionality of Open Automation Software OAS Platform version 18.00.0072. Maliciously crafted network requests can exploit this vulnerability, resulting in arbitrary file creation or overwrite. An attacker can leverage this issue to potentially gain unauthorized access or execute malicious code, posing a significant risk to affected systems. It is essential to apply the necessary patches or upgrades to mitigate this vulnerability promptly.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share