CVE-2023-39479: (0Day) (Pwn2Own) Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability

Published May 3, 2024

Updated

Softing Secure Integration Server OPC UA Gateway Directory Creation Vulnerability. This vulnerability allows remote attackers to create directories on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of FileDirectory OPC UA Objects. The issue results from allowing unauthorized access to the filesystem. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20548.

Affected Software

2 affected components

Softing Secure Integration Server

Softing Secure Integration Server=1.22.0.8686

Event History

May 3, 2024

CVE Published

via MITRE·02:10 AM

Data Sourced

via MITRE·02:10 AM

DescriptionSeverityWeakness

Advisory Published

via ZDI·02:21 AM

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-39479?

CVE-2023-39479 is classified as a medium severity vulnerability due to the requirement of authentication for exploitation.

How do I fix CVE-2023-39479?

To mitigate CVE-2023-39479, users should apply the latest security patches provided by Softing for the Secure Integration Server.

What type of vulnerability is CVE-2023-39479?

CVE-2023-39479 is a directory creation vulnerability that allows authenticated remote attackers to create directories on the server.

Which software is affected by CVE-2023-39479?

CVE-2023-39479 affects the Softing Secure Integration Server.

Can CVE-2023-39479 be exploited without authentication?

No, CVE-2023-39479 requires authentication for an attacker to exploit the directory creation vulnerability.