CVE-2023-39480: (0Day) (Pwn2Own) Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability

Published May 3, 2024

Updated

Softing Secure Integration Server FileDirectory OPC UA Object Arbitrary File Creation Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Softing Secure Integration Server. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed.

The specific flaw exists within the handling of FileDirectory OPC UA Objects. The issue results from allowing unauthorized access to the filesystem. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-20549.

Affected Software

2 affected components

Softing Secure Integration Server

Softing Secure Integration Server=1.22.0.8686

Event History

May 3, 2024

CVE Published

via MITRE·02:10 AM

Data Sourced

via MITRE·02:10 AM

DescriptionSeverityWeakness

Advisory Published

via ZDI·02:21 AM

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-39480?

CVE-2023-39480 has been rated as a high-severity vulnerability due to its potential for arbitrary file creation.

How do I fix CVE-2023-39480?

To mitigate CVE-2023-39480, update Softing Secure Integration Server to the latest patched version.

What types of attacks are possible with CVE-2023-39480?

CVE-2023-39480 allows remote attackers to create arbitrary files, potentially leading to data breaches or system compromise.

Which software is affected by CVE-2023-39480?

CVE-2023-39480 specifically affects the Softing Secure Integration Server.

Is authentication required to exploit CVE-2023-39480?

Yes, authentication is required to exploit CVE-2023-39480.