Labcenter Proteus 9

Summary

Labcenter Proteus 9, specifically version 9.1_SP4_Build_42914, is affected by multiple vulnerabilities including Out-of-bounds Write, Stack-based Buffer Overflow, and Use After Free. Successful exploitation could lead to information disclosure and arbitrary code execution on affected systems.

IFF Assessment

FOE

The identified vulnerabilities allow for information disclosure and arbitrary code execution, posing a significant risk to defenders.

Severity

7.8 High

The CVSS score of 7.8 reflects the severity of the identified vulnerabilities, which include out-of-bounds write, stack-based buffer overflow, and use-after-free, enabling potential arbitrary code execution.

Defender Context

This alert highlights critical vulnerabilities in Labcenter Proteus 9, a software used across various critical infrastructure sectors. Defenders should prioritize patching or updating affected installations to the latest vendor-recommended version (9.2 SPO) to prevent potential exploitation leading to code execution and information disclosure.

Read Full Story →