High severity · published May 28, 2019
CVE-2019-10967
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long…
8.8
CVSS
3.7%
EPSS
No
On KEV
Description
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OO
Ovation Ocr400 Firmware · Emerson
through 3.3.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-10967
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-10967
Third Party Advisory
http://www.securityfocus.com/bid/108499
Third Party Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-19-148-01
More from Ovation Ocr400 Firmware
8.8
CVE-2019-10965
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long…