CVE-2023-27285

IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248625.

Score

CVSS 3.1 8.4 High

Status

Modified - psirt@us.ibm.com

Published

2023-06-05

Last modified

2025-01-08

Weaknesses

CWE-119

Affected products

• Aspera Cargo (Ibm)
• Aspera Connect (Ibm)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/248625
• https://www.ibm.com/support/pages/node/7001053