CVE

Id
79374  
CVE No.
CVE-2015-2097  
Status
Candidate  
Description
Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control.  
Phase
Assigned (20150226)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721690 79374 CVE-2015-2097 EXPLOIT-DB:36602  View
721691 79374 CVE-2015-2097 URL:https://www.exploit-db.com/exploits/36602/  View
721692 79374 CVE-2015-2097 EXPLOIT-DB:36505  View
721693 79374 CVE-2015-2097 URL:https://www.exploit-db.com/exploits/36505/  View
721694 79374 CVE-2015-2097 EXPLOIT-DB:36607  View
721695 79374 CVE-2015-2097 URL:https://www.exploit-db.com/exploits/36607/  View
721696 79374 CVE-2015-2097 FULLDISC:20150223 WESP SDK multiple Remote Code Execution Vulnerabilities  View
721697 79374 CVE-2015-2097 URL:http://seclists.org/fulldisclosure/2015/Feb/90  View
721698 79374 CVE-2015-2097 MISC:http://www.zerodayinitiative.com/advisories/ZDI-15-059/  View
721699 79374 CVE-2015-2097 MISC:http://www.zerodayinitiative.com/advisories/ZDI-15-062/  View
721700 79374 CVE-2015-2097 MISC:http://www.zerodayinitiative.com/advisories/ZDI-15-068/  View
721701 79374 CVE-2015-2097 MISC:http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html  View
721702 79374 CVE-2015-2097 BID:72835  View
721703 79374 CVE-2015-2097 URL:http://www.securityfocus.com/bid/72835  View
721704 79374 CVE-2015-2097 OSVDB:118893  View
721705 79374 CVE-2015-2097 URL:http://www.osvdb.org/118893  View
721706 79374 CVE-2015-2097 OSVDB:118896  View
721707 79374 CVE-2015-2097 URL:http://www.osvdb.org/118896  View
721708 79374 CVE-2015-2097 OSVDB:118902  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6534 JVNDB-2015-001854 MyBB の管理バックエンドにおけるクロスサイトスクリプティングの脆弱性 MyBB (別名 MyBulletinBoard) の管理バックエンドには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-2149 79374 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001854.html  View