Ids
Monthly
A use-after-free in Suricata's inspection-buffer helper can crash or destabilize the detection engine (availability impact only) when a ruleset chains the `dotprefix` transform after another transform on the same inspection buffer, causing the backing buffer to be reallocated while a stale inspection pointer is retained. Affected deployments are Suricata before 7.0.16 and 8.0.x before 8.0.5; the flaw is remotely reachable (CVSS AV:N, PR:N, no user interaction) but exploitation is gated by a non-default, defender-controlled rule configuration plus traffic that traverses that specific inspection path, which is why our assessment raises the attack complexity to High (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) despite the vendor's base score of 7.5. No public exploit code has been identified at time of analysis, there is no CISA KEV listing (SSVC exploitation: none, automatable: no), and EPSS is low at 0.51% (42nd percentile). Vendor-released fixes are available in 7.0.16 and 8.0.5.
Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
A use-after-free in Suricata's inspection-buffer helper can crash or destabilize the detection engine (availability impact only) when a ruleset chains the `dotprefix` transform after another transform on the same inspection buffer, causing the backing buffer to be reallocated while a stale inspection pointer is retained. Affected deployments are Suricata before 7.0.16 and 8.0.x before 8.0.5; the flaw is remotely reachable (CVSS AV:N, PR:N, no user interaction) but exploitation is gated by a non-default, defender-controlled rule configuration plus traffic that traverses that specific inspection path, which is why our assessment raises the attack complexity to High (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) despite the vendor's base score of 7.5. No public exploit code has been identified at time of analysis, there is no CISA KEV listing (SSVC exploitation: none, automatable: no), and EPSS is low at 0.51% (42nd percentile). Vendor-released fixes are available in 7.0.16 and 8.0.5.
Directory traversal vulnerability in the NC854 and NC856 modules for IDS RTU 850C devices allows remote authenticated users to read arbitrary files via unspecified vectors involving an internal web. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.