CVE-2023-34994

An improper resource allocation vulnerability exists in the OAS Engine configuration management functionality of Open Automation Software OAS Platform v18.00.0072. A specially crafted series of network requests can lead to creation of an arbitrary directory. An attacker can send a sequence of requests to trigger this vulnerability.

• CWE-770

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1773Exploit, Technical Description, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1773Exploit, Technical Description, Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1773Exploit, Technical Description, Third Party Advisory
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1773Exploit, Technical Description, Third Party Advisory

Published

Sep 5, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-34989A improper neutralization of special elements used in an os …8.8
• CVE-2023-3499The Photo Gallery, Images, Slider in Rbs Image Gallery WordP…4.8
• CVE-2023-34990A relative path traversal in Fortinet FortiWLM version 8.6.0…9.8
• CVE-2023-34991A improper neutralization of special elements used in an sql…9.8
• CVE-2023-34992A improper neutralization of special elements used in an os …9.8
• CVE-2023-34993A improper neutralization of special elements used in an os …9.8
• CVE-2023-34995 There are no requirements for setting a compl…9.8
• CVE-2023-34997Insecure inherited permissions in the installer for some Int…7.8
• CVE-2023-34998An authentication bypass vulnerability exists in the OAS Eng…8.1
• CVE-2023-34999A command injection vulnerability exists in RTS VLink Virtua…7.2
• CVE-2023-3500An issue has been discovered in GitLab CE/EE affecting all v…6.1
• CVE-2023-35001Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability…7.8