PT-2015-5604 · Oracle · Wesp Sdk

Praveen Darshanam · Published 2015-02-27 · Updated 2016-11-30 · CVE-2015-2097

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebGate Embedded Standard Protocol (WESP) SDK versions (affected versions not specified)

Description The issue concerns multiple buffer overflows in the WESP SDK, allowing remote attackers to execute arbitrary code. This can be achieved through various vectors, including the LoadImage or LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, the ChangePassword function in the WESPCONFIGLib.UserItem control, the Connect function in the WESPSerialPort.WESPSerialPortCtrl.1 or WESPPLAYBACKLib.WESPPlaybackCtrl control, the AddID function in the WESPCONFIGLib.IDList control, or by passing a long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2015-2097

ZDI-15-059

ZDI-15-062

ZDI-15-068

Affected Products

Wesp Sdk

References · 16

• 🔥 http://seclists.org/fulldisclosure/2015/Feb/90 · Exploit
• 🔥 https://exploit-db.com/exploits/36505 · Exploit
• 🔥 https://exploit-db.com/exploits/36602 · Exploit
• 🔥 http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/36607 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-2097 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-062 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-059 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-068 · Security Note
• http://osvdb.org/118902 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-062 · Note
• http://osvdb.org/118893 · Note
• http://osvdb.org/118896 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-068 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-059 · Note