Critical severity · published Mar 8, 2019
CVE-2019-8280
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution
9.8
CVSS
4.2%
EPSS
No
On KEV
Description
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UL
UltraVNC · Kaspersky Lab
1.2.2.3 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-8280
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-8280
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
cert-portal.siemens.com
https://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
Third Party Advisory
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/
us-cert.cisa.gov
https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11
www.us-cert.gov
https://www.us-cert.gov/ics/advisories/icsa-20-161-06
More from UltraVNC
9.8
CVE-2019-8275
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users
9.8
CVE-2019-8274
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution
9.8
CVE-2019-8273
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution
9.8
CVE-2019-8272
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution
9.8
CVE-2019-8271
UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution