Multiple vulnerabilities in IBM WIoTP MessageGateway/IoT MessageSight

1) Cryptographic issues

EUVDB-ID: #VU60166

Risk: Low

CVSSv4.0: 0.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-4160

CWE-ID: CWE-310 - Cryptographic Issues

Exploit availability: No

The vulnerability allows a remote attacker to decrypt TLS traffic.

The vulnerability exists due to BN_mod_exp may produce incorrect results on MIPS. A remote attacker can decrypt TLS traffic. According to vendor, multiple EC algorithms are affected, including some of the TLS 1.3 default curves. 

Successful exploitation of the vulnerability requires certain pre-requisites for attack, such as obtaining and  reusing private keys. 

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Improper Restriction of Rendered UI Layers or Frames

EUVDB-ID: #VU64013

Risk: Medium

CVSSv4.0: 1.2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-46708

CWE-ID: CWE-1021 - Improper Restriction of Rendered UI Layers or Frames

Exploit availability: No

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can trick the victim into opening a specially crafted URL to hijack the victim's click actions and possibly launch further attacks against the victim.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Input validation error

EUVDB-ID: #VU64011

Risk: Low

CVSSv4.0: 2 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/U:Clear]

CVE-ID: CVE-2018-25031

CWE-ID: CWE-20 - Improper input validation

Exploit availability: Yes

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can trick the victim into opening a specially crafted URL to display remote OpenAPI definitions.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

4) Code Injection

EUVDB-ID: #VU60834

Risk: High

CVSSv4.0: 8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Amber]

CVE-ID: CVE-2021-23450

CWE-ID: CWE-94 - Improper Control of Generation of Code ('Code Injection')

Exploit availability: No

The disclosed vulnerability allows a remote attacker to execute arbitrary code on the system.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker can inject and execute arbitrary script code via the setObject function.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Infinite loop

EUVDB-ID: #VU61391

Risk: Medium

CVSSv4.0: 7.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2022-0778

CWE-ID: CWE-835 - Loop with Unreachable Exit Condition ('Infinite Loop')

Exploit availability: Yes

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to infinite loop within the BN_mod_sqrt() function when processing an ASN.1 certificate that contains elliptic curve public keys in compressed form or explicit elliptic curve parameters with a base point encoded in compressed form. A remote attacker can supply a specially crafted certificate to the TLS server or client, consume all available system resources and cause denial of service conditions.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.

6) LDAP injection

EUVDB-ID: #VU59970

Risk: Medium

CVSSv4.0: 1.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2021-39031

CWE-ID: CWE-90 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')

Exploit availability: No

The vulnerability allows a remote user to escalate privileges on the system.

The vulnerability exists due to improper input validation when processing DLAP queries. A remote user can send a specially crafted request to modify the original LDAP query and gain unauthorized access to the application.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Spoofing attack

EUVDB-ID: #VU60870

Risk: Low

CVSSv4.0: 0.5 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-39038

CWE-ID: CWE-451 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)

Exploit availability: No

The vulnerability allows a remote attacker to perform clickjacking attack.

The vulnerability exists due to incorrect processing of user-supplied data, when REST API discovery is configured through the WebSphere administrative console Web Container settings to enable the API Discovery service, or through IBM WebSphere Application Server Liberty features mpOpenAPI-1.0, mpOpenAPI-1.1, mpOpenAPI-2.0, apiDiscovery-1.0, openapi-3.0 or openapi-3.1. A remote attacker can perform clickjacking attack.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Use of a broken or risky cryptographic algorithm

EUVDB-ID: #VU61581

Risk: Low

CVSSv4.0: 1.3 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-22310

CWE-ID: CWE-327 - Use of a Broken or Risky Cryptographic Algorithm

Exploit availability: No

The vulnerability allows a remote attacker to perform MitM attack.

The vulnerability exists due to usage of a weak cryptographic algorithms. A remote attacker can intercept and decrypt traffic.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the local network (LAN).

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Improper input validation

EUVDB-ID: #VU59734

Risk: Low

CVSSv4.0: 1.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-21248

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The vulnerability exists due to improper input validation within the Serialization component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

10) Improper input validation

EUVDB-ID: #VU59723

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21365

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the ImageIO component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

11) Improper input validation

EUVDB-ID: #VU59719

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21291

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The vulnerability exists due to improper input validation within the Hotspot component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

12) Improper input validation

EUVDB-ID: #VU59730

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21293

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the Libraries component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

13) Improper input validation

EUVDB-ID: #VU59731

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21294

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the Libraries component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

14) Improper input validation

EUVDB-ID: #VU59720

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21305

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to manipulate data.

The vulnerability exists due to improper input validation within the Hotspot component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to manipulate data.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

15) Improper input validation

EUVDB-ID: #VU59732

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21340

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the Libraries component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

16) Improper input validation

EUVDB-ID: #VU59733

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21341

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the Serialization component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

17) Improper input validation

EUVDB-ID: #VU59718

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21349

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the 2D component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

18) Improper input validation

EUVDB-ID: #VU59722

Risk: Medium

CVSSv4.0: 2.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2022-21360

CWE-ID: CWE-20 - Improper input validation

Exploit availability: No

The vulnerability allows a remote non-authenticated attacker to perform service disruption.

The vulnerability exists due to improper input validation within the ImageIO component in Oracle GraalVM Enterprise Edition. A remote non-authenticated attacker can exploit this vulnerability to perform service disruption.

Install update from vendor's website.

IBM WIoTP MessageGateway: 5.0.0.1

IBM IoT MessageSight: 5.0.0.0

• cpe:2.3:a:ibm_corporation:ibm_wiotp_messagegateway:5.0.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:ibm_corporation:ibm_iot_messagesight:5.0.0.0:*:*:*:*:*:*:*

https://www.ibm.com/support/pages/node/6592587

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.