Critical ICSA-24-284-16 6 CVEs

Rockwell Automation DataMosaix Private Cloud

Published Oct 10, 2024 · Updated Oct 10, 2024

Vendor: Rockwell Automation Product: DataMosaix™ Private Cloud

Summary

Successful exploitation of these vulnerabilities could cause a denial-of-service condition, view customer data, or perform remote code execution.

Vulnerabilities 6

High 7.8

CVE-2019-18276 Public exploit

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run wi…

bash bash Debian Ubuntu

Nov 28, 2019
High 7.5

CVE-2019-9923

pax_decode_header in sparse.c in GNU Tar before 1.32 had a NULL pointer dereference when parsing certain archives that …

tar tar Debian Ubuntu

Mar 22, 2019
Medium 5.3

CVE-2019-14855

A flaw was found in the way certificate signatures could be forged using collisions found in the SHA-1 algorithm. An at…

Red Hat gnupg2 gnupg2 gnupg2 Debian Ubuntu Alpine

Mar 20, 2020
Unscored —

CVE-2019-17543 EPSS 10%

LZ4 before 1.9.2 has a heap-based buffer overflow in LZ4_write32 (related to LZ4_compress_destSize), affecting applicat…

lz4 lz4 Debian Alpine

Oct 14, 2019
Unscored —

CVE-2019-19244

sqlite3Select in select.c in SQLite 3.30.1 allows a crash if a sub-select uses both DISTINCT and window functions, and …

sqlite3 sqlite Debian Alpine

Nov 25, 2019
Unscored —

CVE-2019-9893

libseccomp before 2.4.0 did not correctly generate 64-bit syscall argument comparisons using the arithmetic operators (…

libseccomp libseccomp libseccomp Debian Ubuntu Alpine

Mar 21, 2019

Revision history

2024-10-10 #1
Initial Publication

References

ICSA Advisory ICSA-24-284-16 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-24-284-16
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
Recommended Practices
https://www.cisa.gov/uscert/ncas/tips/ST04-014