8.4
High
CVE-2023-27285 IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds…
Description
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 is vulnerable to a buffer overflow, caused by improper bounds checking. An attacker could overflow a buffer and execute arbitrary code on the system. IBM X-Force ID: 248625.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aspera Connect | 4.2.5 | No fix stated |
| Aspera Cargo | 4.2.5 | No fix stated |
Other CVEs of Aspera Connect
The 5 CVEs of Aspera Connect →
CVE-2026-120115
Multiple vulnerabilities in IBM Aspera Connect
6.3
Medium
CVE-2026-120113
Multiple vulnerabilities in IBM Aspera Connect
6.4
Medium
CVE-2023-22862
IBM Aspera Connect 4.2.5 and IBM Aspera Cargo 4.2.5 transmits authentication credentials, but it uses an insecure method…
5.9
Medium
CVE-2020-4545
IBM Aspera Connect 3.9.9 could allow a remote attacker to execute arbitrary code on the system, caused by improper…
7.8
High