PT-2015-2439 · Radia · Radia Client Automation
Juan Vazquez
·
Publicado
2015-07-20
·
Atualizado
2016-12-24
·
CVE-2015-7860
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Radia Client Automation versions prior to 9.1
Description
The issue is caused by a stack-based buffer overflow in the agent. This allows a remote attacker to execute arbitrary code by sending a large amount of data, potentially in environments lacking relationship-based firewalling. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.
Recommendations
For versions prior to 9.1, update to version 9.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the agent to minimize the risk of exploitation. Avoid using the affected agent in environments that lack relationship-based firewalling until the issue is resolved.
Correção
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Radia Client Automation