PT-2015-3053 · Ininet Solutions Gmbh · Ada Web Server+1

Aleksandr Timorin + 1 · Publicado 2015-10-25 · Atualizado 2015-10-27 · CVE-2015-1001

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IniNet Solutions GmbH's SCADA Web Server versions prior to 2.02 IniNet embeddedWebServer (aka eWebServer) versions prior to 2.02

Description The issue is caused by multiple stack-based buffer overflows in the IniNet embeddedWebServer. Exploitation of these issues may allow a remote attacker to execute arbitrary code via a long field in an HTTP request.

Recommendations For versions prior to 2.02, update to version 2.02 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP request field to minimize the risk of exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2016-00258

CVE-2015-1001

Produtos afetados

Ada Web Server

Embedded Web Server

Referências · 3

• https://bdu.fstec.ru/vul/2016-00258 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1001 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-293-02 · Nota