PT-2015-5607 · Webgate · Webgate Control Center+1

Rgod · Publicado 2015-02-27 · Atualizado 2021-08-03 · CVE-2015-2100

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebGate eDVR Manager (affected versions not specified) WebGate Control Center (affected versions not specified)

Description The issue concerns multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center. These overflows allow remote attackers to execute arbitrary code via unspecified vectors to the (1) TCPDiscover or (2) TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control.

Recommendations For WebGate eDVR Manager, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For WebGate Control Center, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2015-2100

ZDI-15-057

ZDI-15-067

Produtos afetados

Webgate Control Center

Webgate Edvr Manager

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2100 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-15-057 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-067 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-15-057 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-15-067 · Nota