Vulnerability Spotlight: Callback Technologies CBFS Filter denial-of-service vulnerabilities

guest · Nov 23, 2022

By Kri Dontje - November 22, 2022

Cisco Talos recently discovered three denial-of-service vulnerabilities in Callback Technologies CBFS Filter.

Callback Technologies has a CBFS file storage solution for use in customizing data persistence on devices. To accompany this, their CBFS Filter manages this file storage solution, allowing users to create filter and access rules, modify and encrypt data, etc.
Click to expand...

Talos has identified three null pointer dereference vulnerabilities in CBFS Filter:

TALOS-2022-1647 (CVE-2022-43588)
TALOS-2022-1648 (CVE-2022-43589)
TALOS-2022-1649 (CVE-2022-43590)
A specially crafted I/O request packet (IRP) can lead to denial of service. An attacker can issue an ioctl to trigger these vulnerabilities.
Click to expand...

Users are encouraged to update this affected product as soon as possible: Callback technologies CBFS Filter 20.0.8317. Talos tested and confirmed this version of the CBFS Filter could be exploited by these vulnerabilities.
Click to expand...

Log in or Sign up

Vulnerability Spotlight: Callback Technologies CBFS Filter denial-of-service vulnerabilities

guest Guest

Log in or Sign up

Vulnerability Spotlight: Callback Technologies CBFS Filter denial-of-service vulnerabilities

guest Guest

Useful Searches