CVE-2023-42797

HIGH Year: 2023
CVSS v3 Score
7.2
High
Weakness Type
CWE-908
View all →

Vulnerability Description

A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05.20), CP-8050 MASTER MODULE (All versions < CPCI85 V05.20). The network configuration service of affected devices contains a flaw in the conversion of ipv4 addresses that could lead to an uninitialized variable being used in succeeding validation steps. By uploading specially crafted network configuration, an authenticated remote attacker could be able to inject commands that are executed on the device with root privileges during device startup.

Related Vulnerabilities

CVE-2024-11364

HIGH
CVSS:7.3(High)

Another “uninitialized variable” code execution vulnerability exists in the Rockwell Automation Arena® that could allow a threat actor to craft a DOE file and force the software to access a variable p...

CWE-9082024

CVE-2019-13220

HIGH
CVSS:7.1(High)

Use of uninitialized stack variables in the start_decoder function in stb_vorbis through 2019-03-04 allows an attacker to cause a denial of service or disclose sensitive information by opening a craft...

CWE-9082019

CVE-2020-15193

HIGH
CVSS:7.1(High)

In Tensorflow before versions 2.2.1 and 2.3.1, the implementation of `dlpack.to_dlpack` can be made to use uninitialized memory resulting in further memory corruption. This is because the pybind11 glu...

CWE-9082020

CVE-2021-37682

HIGH
CVSS:7.1(High)

TensorFlow is an end-to-end open source platform for machine learning. In affected versions all TFLite operations that use quantization can be made to use unitialized values. [For example](https://git...

CWE-9082021

CVE-2021-47101

HIGH
CVSS:7.1(High)

In the Linux kernel, the following vulnerability has been resolved: asix: fix uninit-value in asix_mdio_read() asix_read_cmd() may read less than sizeof(smsr) bytes and in this case smsr will be unini...

CWE-9082021

CVE-2023-52842

HIGH
CVSS:7.1(High)

In the Linux kernel, the following vulnerability has been resolved: virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() KMSAN reported the following uninit-value access issue: ==============...

CWE-9082023