Openssl – type confusion

Advisory ID CVE Number Date discovered Severity Advisory revision
STORM-2023-016 CVE-2023-0286 02/08/2023 medium v1

Vulnerability details

Confusion related to the management of x.400 and x.509 certificate addresses that could cause a denial of service or affect the confidentiality of data

Impacted products

ProductsSeverityDetail
Stormshield Management Center medium Confusion related to the management of x.400 and x.509 certificate addresses that could cause a denial of service or affect the confidentiality of data

Revisions

Version Date Description
v1 Initial release


Stormshield Management Center

CVSS v3.1 Overall Score: 5.2      

Analysis

Impacted version

Impacted
  • SMC <= 3.3.2

Workaround solution

Solution

There is no workaround solution.

The 3.3.3 update will fix this vulnerability.



Attack Vector Attack Complexity Privileges Required User Interaction Scope Confidentiality Impact Integrity Impact Availability impact
Network High High None Unchanged High High High
CVSS Base score: 6.6 CVSS Vector: (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H)
Exploit Code Maturity Remediation Level Report Confidence
Unproven that exploit exists Official fix Confirmed
CVSS Temporal score: 5.8 CVSS Vector: (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Confidentiality Requirement (CR) Integrity Requirement (IR) Availability Requirement (AR)
Medium High High
CVSS Environmental score: 5.2 CVSS Vector: (AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C/CR:M/IR:H/AR:H/MAV:X/MAC:X/MPR:X/MUI:X/MS:X/MC:X/MI:X/MA:X)