CVE-2023-28391 - Vulnerability Details - OpenCVE

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Changed

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact total

Vendors	Products
Silabs	Gecko Platform Gecko Software Development Kit
Weston-embedded	Cesium Net Uc-http

Configuration 1 [-]

OR	cpe:2.3:a:silabs:gecko_software_development_kit:4.3.1:::::::*
	cpe:2.3:a:weston-embedded:cesium_net:3.07.01:::::::*
	cpe:2.3:a:weston-embedded:uc-http:3.01.01:::::::*

No data.

References

Link	Providers
https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732

History

Thu, 03 Oct 2024 14:30:00 +0000

Type	Values Removed	Values Added
First Time appeared		Silabs gecko Platform
CPEs		cpe:2.3:a:silabs:gecko_platform::::::::
Vendors & Products		Silabs gecko Platform
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: talos

Published: 2023-11-14T09:14:53.018Z

Updated: 2024-10-03T14:04:57.769Z

Reserved: 2023-03-20T13:45:06.752Z

Link: CVE-2023-28391

Vulnrichment

Updated: 2024-08-02T12:38:25.157Z

NVD

Status : Modified

Published: 2023-11-14T10:15:27.937

Modified: 2024-11-21T07:54:58.733

Link: CVE-2023-28391

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-28391", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2023-03-20T13:45:06.752Z", "datePublished": "2023-11-14T09:14:53.018Z", "dateUpdated": "2024-10-03T14:04:57.769Z"}, "containers": {"cna": {"affected": [{"vendor": "Silicon Labs", "product": "Gecko Platform", "versions": [{"version": "4.3.1.0", "status": "affected"}]}, {"vendor": "Weston Embedded", "product": "Cesium NET", "versions": [{"version": "3.07.01", "status": "affected"}]}, {"vendor": "Weston Embedded", "product": "uC-HTTP", "versions": [{"version": "v3.01.01", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "type": "CWE", "cweId": "CWE-119"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9, "baseSeverity": "CRITICAL"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2023-11-14T18:00:07.577Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732"}], "credits": [{"lang": "en", "value": "Discovered by Kelly Leuschner of Cisco Talos."}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:38:25.157Z"}, "title": "CVE Program Container", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "silabs", "product": "gecko_platform", "cpes": ["cpe:2.3:a:silabs:gecko_platform:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "4.3.1.0", "status": "affected"}]}, {"vendor": "weston-embedded", "product": "cesium_net", "cpes": ["cpe:2.3:a:weston-embedded:cesium_net:3.07.01:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "3.07.01", "status": "affected"}]}, {"vendor": "weston-embedded", "product": "uc-http", "cpes": ["cpe:2.3:a:weston-embedded:uc-http:3.01.01:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "3.01.01", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-03T14:13:43.865936Z", "id": "CVE-2023-28391", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T14:04:57.769Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-28391", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2023-03-20T13:45:06.752Z", "datePublished": "2023-11-14T09:14:53.018Z", "dateUpdated": "2024-10-03T14:04:57.769Z"}, "containers": {"cna": {"affected": [{"vendor": "Silicon Labs", "product": "Gecko Platform", "versions": [{"version": "4.3.1.0", "status": "affected"}]}, {"vendor": "Weston Embedded", "product": "Cesium NET", "versions": [{"version": "3.07.01", "status": "affected"}]}, {"vendor": "Weston Embedded", "product": "uC-HTTP", "versions": [{"version": "v3.01.01", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer", "type": "CWE", "cweId": "CWE-119"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "attackVector": "NETWORK", "attackComplexity": "HIGH", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseScore": 9, "baseSeverity": "CRITICAL"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2023-11-14T18:00:07.577Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732"}], "credits": [{"lang": "en", "value": "Discovered by Kelly Leuschner of Cisco Talos."}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T12:38:25.157Z"}, "title": "CVE Program Container", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-28391", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-03T14:13:43.865936Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:silabs:gecko_platform:*:*:*:*:*:*:*:*"], "vendor": "silabs", "product": "gecko_platform", "versions": [{"status": "affected", "version": "4.3.1.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:weston-embedded:cesium_net:3.07.01:*:*:*:*:*:*:*"], "vendor": "weston-embedded", "product": "cesium_net", "versions": [{"status": "affected", "version": "3.07.01"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:weston-embedded:uc-http:3.01.01:*:*:*:*:*:*:*"], "vendor": "weston-embedded", "product": "uc-http", "versions": [{"status": "affected", "version": "3.01.01"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-03T14:14:49.827Z"}}]}}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:silabs:gecko_software_development_kit:4.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "90DDAC84-E71F-44E3-A5A8-D949DC1943D4", "vulnerable": true}, {"criteria": "cpe:2.3:a:weston-embedded:cesium_net:3.07.01:*:*:*:*:*:*:*", "matchCriteriaId": "44A78DFC-FD24-43A2-A4F4-76A77F46E9A5", "vulnerable": true}, {"criteria": "cpe:2.3:a:weston-embedded:uc-http:3.01.01:*:*:*:*:*:*:*", "matchCriteriaId": "6939279F-5819-4661-9050-3947010C9B71", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Specially crafted network packets can lead to code execution. An attacker can send a malicious packet to trigger this vulnerability."}, {"lang": "es", "value": "Existe una vulnerabilidad de corrupci\u00f3n de memoria en la funcionalidad de an\u00e1lisis de encabezados de HTTP Server de Weston Embedded uC-HTTP v3.01.01. Los paquetes de red especialmente manipulados pueden conducir a la ejecuci\u00f3n de c\u00f3digo. Un atacante puede enviar un paquete malicioso para desencadenar esta vulnerabilidad."}], "id": "CVE-2023-28391", "lastModified": "2024-11-21T07:54:58.733", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.0, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 6.0, "source": "talos-cna@cisco.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-11-14T10:15:27.937", "references": [{"source": "talos-cna@cisco.com", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Technical Description", "Third Party Advisory"], "url": "https://talosintelligence.com/vulnerability_reports/TALOS-2023-1732"}], "sourceIdentifier": "talos-cna@cisco.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-119"}], "source": "talos-cna@cisco.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}