CVE-2024-22178 - OpenCVE

A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Vendors	Products
Openautomationsoftware	Oas Platform

No data.

No data.

References

Link	Providers
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951

History

No history.

MITRE

Status: PUBLISHED

Assigner: talos

Published: 2024-04-03T13:55:02.134Z

Updated: 2024-08-01T22:35:34.942Z

Reserved: 2024-02-21T15:36:51.486Z

Link: CVE-2024-22178

Vulnrichment

Updated: 2024-07-31T20:30:42.551Z

NVD

Status : Awaiting Analysis

Published: 2024-04-03T14:15:14.543

Modified: 2024-04-03T17:24:18.150

Link: CVE-2024-22178

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-22178", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "state": "PUBLISHED", "assignerShortName": "talos", "dateReserved": "2024-02-21T15:36:51.486Z", "datePublished": "2024-04-03T13:55:02.134Z", "dateUpdated": "2024-08-01T22:35:34.942Z"}, "containers": {"cna": {"affected": [{"vendor": "Open Automation Software", "product": "OAS Platform", "versions": [{"version": "V19.00.0057", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-73: External Control of File Name or Path", "type": "CWE", "cweId": "CWE-73"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "availabilityImpact": "NONE", "baseScore": 4.9, "baseSeverity": "MEDIUM"}}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2024-04-03T17:00:06.894Z"}, "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951"}], "credits": [{"lang": "en", "value": "Discovered by Jared Rittle of Cisco Talos."}]}, "adp": [{"affected": [{"vendor": "openautomationsoftware", "product": "oas_platform", "cpes": ["cpe:2.3:a:openautomationsoftware:oas_platform:19.00.0057:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "19.00.0057", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-04-03T18:02:02.814251Z", "id": "CVE-2024-22178", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-31T20:30:47.749Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T22:35:34.942Z"}, "title": "CVE Program Container", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-22178", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-03T18:02:02.814251Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:openautomationsoftware:oas_platform:19.00.0057:*:*:*:*:*:*:*"], "vendor": "openautomationsoftware", "product": "oas_platform", "versions": [{"status": "affected", "version": "19.00.0057"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-31T20:30:42.551Z"}}], "cna": {"credits": [{"lang": "en", "value": "Discovered by Jared Rittle of Cisco Talos."}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "Open Automation Software", "product": "OAS Platform", "versions": [{"status": "affected", "version": "V19.00.0057"}]}], "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951", "name": "https://talosintelligence.com/vulnerability_reports/TALOS-2024-1951"}], "descriptions": [{"lang": "en", "value": "A file write vulnerability exists in the OAS Engine Save Security Configuration functionality of Open Automation Software OAS Platform V19.00.0057. A specially crafted series of network requests can lead to arbitrary file creation or overwrite. An attacker can send a sequence of requests to trigger this vulnerability."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-73", "description": "CWE-73: External Control of File Name or Path"}]}], "providerMetadata": {"orgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "shortName": "talos", "dateUpdated": "2024-04-03T17:00:06.894Z"}}}, "cveMetadata": {"cveId": "CVE-2024-22178", "state": "PUBLISHED", "dateUpdated": "2024-07-31T20:30:47.749Z", "dateReserved": "2024-02-21T15:36:51.486Z", "assignerOrgId": "b86d76f8-0f8a-4a96-a78d-d8abfc7fc29b", "datePublished": "2024-04-03T13:55:02.134Z", "assignerShortName": "talos"}, "dataVersion": "5.1"}