CVE-2015-2097

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.zerodayinitiative.com/advisories/ZDI-15-068/
http://seclists.org/fulldisclosure/2015/Feb/90	Exploit
http://www.zerodayinitiative.com/advisories/ZDI-15-062/
http://www.zerodayinitiative.com/advisories/ZDI-15-059/
http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html	Exploit
http://www.osvdb.org/118893
http://www.osvdb.org/118896
https://www.exploit-db.com/exploits/36602/	Exploit
http://www.osvdb.org/118902
https://www.exploit-db.com/exploits/36607/
http://www.securityfocus.com/bid/72835
https://www.exploit-db.com/exploits/36505/

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:webgate:webgate_embedded_standard_protocol_sdk:-:*:*:*:*:*:*:*

Information

Published : 2015-03-09 07:59

Updated : 2016-11-29 19:01

NVD link : CVE-2015-2097

Mitre link : CVE-2015-2097

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

webgate

webgate_embedded_standard_protocol_sdk

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-068/", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-068/", "tags": [], "refsource": "MISC"}, {"url": "http://seclists.org/fulldisclosure/2015/Feb/90", "name": "20150223 WESP SDK multiple Remote Code Execution Vulnerabilities", "tags": ["Exploit"], "refsource": "FULLDISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-062/", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-062/", "tags": [], "refsource": "MISC"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-059/", "name": "http://www.zerodayinitiative.com/advisories/ZDI-15-059/", "tags": [], "refsource": "MISC"}, {"url": "http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html", "name": "http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://www.osvdb.org/118893", "name": "118893", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.osvdb.org/118896", "name": "118896", "tags": [], "refsource": "OSVDB"}, {"url": "https://www.exploit-db.com/exploits/36602/", "name": "36602", "tags": ["Exploit"], "refsource": "EXPLOIT-DB"}, {"url": "http://www.osvdb.org/118902", "name": "118902", "tags": [], "refsource": "OSVDB"}, {"url": "https://www.exploit-db.com/exploits/36607/", "name": "36607", "tags": [], "refsource": "EXPLOIT-DB"}, {"url": "http://www.securityfocus.com/bid/72835", "name": "72835", "tags": [], "refsource": "BID"}, {"url": "https://www.exploit-db.com/exploits/36505/", "name": "36505", "tags": [], "refsource": "EXPLOIT-DB"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2015-2097", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "acInsufInfo": true, "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2015-03-09T14:59Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:webgate:webgate_embedded_standard_protocol_sdk:-:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2016-11-30T03:01Z"}