CVE-2023-4229
published 2023-08-24CVE-2023-4229: A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This…
PriorityP423medium4.7CVSS 3.1
AVNACLPRNUIRSCCNILAN
EPSS
0.32%
24.3th percentile
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| linux | linux_kernel | >= 3.9.0 < 4.14.312 | 4.14.312 |
| linux | linux_kernel | >= 4.15.0 < 4.19.280 | 4.19.280 |
| linux | linux_kernel | >= 4.20.0 < 5.4.240 | 5.4.240 |
| linux | linux_kernel | >= 5.11.0 < 5.15.106 | 5.15.106 |
| linux | linux_kernel | >= 5.16.0 < 6.1.23 | 6.1.23 |
| linux | linux_kernel | >= 5.5.0 < 5.10.177 | 5.10.177 |
| linux | linux_kernel | >= 6.2.0 < 6.2.10 | 6.2.10 |
| moxa | iologik_4000_series | 1.0 – 1.6 | — |
| moxa | iologik_e4200_firmware | <= 1.6 | — |
CVSS provenance
nvdv3.14.7MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N
vendor_redhat6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
osv·2025-12-09
CVE-2023-53788 ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
tuning_ctl_set() might have buffer overrun at (X) if it didn't break
from loop by matching (A).
static int tuning_ctl_set(...)
{
for (i = 0; i < TUNING_CTLS_COUNT; i++)
(A) if (nid == ca0132_tuning_ctls[i].nid)
break;
snd_hda_power_up(...);
(X) dspio_set_param(..., ca0132_tuning_ctls[i].mid, ...);
snd_hda_power_down(...); ^
return 1;
}
We will get below error by cppcheck
sound/pci/hda/patch_ca0132.c:4229:2: note: After for loop, i has value 12
for (i = 0; i < TUNING_CTLS_COUNT; i++)
^
sound/pci/hda/patch_ca0132.c:4234:43: note: Array index out of bounds
dspio_set_param(codec, ca0132_tuning_ctls[i].m
GHSA
GHSA-mffg-qrhg-gg4p: A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1
ghsa_unreviewed·2023-08-24
CVE-2023-4229 [MEDIUM] CWE-1021 GHSA-mffg-qrhg-gg4p: A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1
A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, potentially exposing users to security risks. This vulnerability may allow attackers to trick users into interacting with malicious content, leading to unintended actions or unauthorized data disclosures.
Red Hat
kernel: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
vendor_redhat·2025-12-09·CVSS 6.1
CVE-2023-53788 [MEDIUM] CWE-129 kernel: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
kernel: ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
tuning_ctl_set() might have buffer overrun at (X) if it didn't break
from loop by matching (A).
static int tuning_ctl_set(...)
{
for (i = 0; i < TUNING_CTLS_COUNT; i++)
(A)if (nid == ca0132_tuning_ctls[i].nid)
break;
snd_hda_power_up(...);
(X)dspio_set_param(..., ca0132_tuning_ctls[i].mid, ...);
snd_hda_power_down(...); ^
return 1;
}
We will get below error by cppcheck
sound/pci/hda/patch_ca0132.c:4229:2: note: After for loop, i has value 12
for (i = 0; i < TUNING_CTLS_COUNT; i++)
^
sound/pci/hda/patch_ca0132.c:4234:43: note: Array index out of bounds
dspio_set_param(codec, ca0132_tuning_ctls[i].mi
No detection rules found.
No public exploits indexed.
https://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerabilityhttps://www.moxa.com/en/support/product-support/security-advisory/mpsa-230310-iologik-4000-series-multiple-web-server-vulnerabilities-and-improper-access-control-vulnerability
2023-08-24
Published