PT-2019-13368 · Castle Rock · Snmpc

Publicado 2019-07-12 · Atualizado 2020-08-24 · CVE-2019-13494

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Castle Rock SNMPc versions prior to 9.0.12.1 Castle Rock SNMPc versions 10.x prior to 10.0.9

Description The issue is related to a stack-based buffer overflow in the nodeimp.exe component. This occurs when a long variable string is present in a Map Objects text file.

Recommendations For versions prior to 9.0.12.1, update to version 9.0.12.1 or later. For versions 10.x prior to 10.0.9, update to version 10.0.9 or later.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-13494

Produtos afetados

Snmpc

Referências · 5

• 🔥 https://exploit-db.com/exploits/47105 · Exploit
• 🔥 http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html · Exploit
• 🔥 https://mogozobo.com/?p=3534 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-13494 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-13494 · Aviso do Fabricante