PT-2019-12752 · Hosting Controller · Hosting Controller Hc10

Hyp3Rlinx + 1 · Publicado 2019-06-18 · Atualizado 2020-08-24 · CVE-2019-12323

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Hosting Controller HC10 version 10.14

Description The issue allows for an Invalid Pointer Write Denial of Service (DoS) in the HC.Server service.

Recommendations For Hosting Controller HC10 version 10.14, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-12323

Produtos afetados

Hosting Controller Hc10

Referências · 7

• 🔥 https://exploit-db.com/exploits/46995 · Exploit
• 🔥 http://hyp3rlinx.altervista.org · Exploit
• 🔥 http://seclists.org/fulldisclosure/2019/Jun/28 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-12323 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-12323 · Aviso do Fabricante
• https://t.me/defcon_news/16684 · Publicação no Telegram
• https://help.hostingcontroller.com/OnlineHelp/default.aspx?pageid=hc_release_notes · Aviso do Fabricante