PT-2015-5606 · Webgate · Webgate Control Center

Rgod · Published 2015-02-27 · Updated 2021-08-03 · CVE-2015-2099

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebGate Control Center (affected versions not specified)

Description The issue concerns multiple buffer overflows in the WebGate Control Center, allowing remote attackers to execute arbitrary code. This can be achieved through various vectors, including the GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, the Login function in the LoginContoller.LoginControllerCtrl.1 control, and the GetThumbnail function in the WESPPlayback.WESPPlaybackCtrl.1 control.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2015-2099

ZDI-15-055

ZDI-15-056

ZDI-15-063

Affected Products

Webgate Control Center

References · 8

• 🔥 https://exploit-db.com/exploits/36518 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-15-056 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-063 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-2099 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-055 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-15-055 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-063 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-056 · Note