• State
  • Replies 5 replies
  • Subscribers 53 subscribers
  • Views 37 views
  • Users 0 members are here
Support feedback
Options
Options
Related

CODECOMPOSER: Dinged for security issue with CCS 21

Keith Barkley
Guru 43755 points

Part Number: CODECOMPOSER

I  just got my computer kicked off our network because a scan did not like something in the install.

My IT team said it was this:

Here is the path and version:

C:\\ti\\ccs2100\\ccs\\ccs_base\\cloudagent\\node.exe\n 

 

Installed version : 18.16.0.0 \  Fixed version     : 18.18.2

Sounds suspiciously like nodeJS...

 

  • 0
    TI__Guru**** 484571 points

    Hi Keith,

    Keith Barkley said:
    Sounds suspiciously like nodeJS...

    Yes, it is. CCS Theia is based on Theia IDE which has a dependency on Node.js. It has been like this since CCS 20.0. 

    We did update the Node.js version we ship with recently. Perhaps your security is flagging this version? Or does your IT have an update policy regarding Node.js?

  • 0 in reply to Ki
    Guru 43755 points

    I don't think I have installed CCS here since 20.0.

    I don't know the details other than what I stated, they replaced the installed 18.16.00 with 18.18.2 and all is well.

    An automated system scan flagged node.exe as an issue, and I got disconnected from the network. My local IT guys installed the newer version and it passed the scan. I can probably get some more details, but that is all I know at the moment.

    Actually, I am totally confused, I just looked in the CCS21 install and the node version (from the node -v command) says 26 and change, not an 18.XX in sight, and the file has not been modified, so it does not look like they changed anything.

  • 0 in reply to Keith Barkley
    TI__Guru**** 484571 points

    Looks like multiiple copies of node comes with CCS. For me, I see:

    The one in C:\ti\ccs2100\ccs\tools\node is version 22.7.0

    The one in C:\ti\ccs2100\ccs\ccs_base\cloudagent is 18.16.0 (which was the one flagged by your IT).

    Looks like it is the older versions of node that is being flagged.

  • 0 in reply to Ki
    Guru 43755 points

    How did you check the version?

  • 0 in reply to Keith Barkley
    TI__Guru**** 484571 points

    I just browsed to those folders and ran the node executable there: