PT-2015-5607 · Webgate · Webgate Control Center+1

Rgod · Published 2015-02-27 · Updated 2021-08-03 · CVE-2015-2100

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WebGate eDVR Manager (affected versions not specified) WebGate Control Center (affected versions not specified)

Description The issue concerns multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center. These overflows allow remote attackers to execute arbitrary code via unspecified vectors to the (1) TCPDiscover or (2) TCPDiscover2 function in the WESPDiscovery.WESPDiscoveryCtrl.1 control.

Recommendations For WebGate eDVR Manager, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For WebGate Control Center, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2015-2100

ZDI-15-057

ZDI-15-067

Affected Products

Webgate Control Center

Webgate Edvr Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-2100 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-067 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-057 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-15-057 · Note
• http://zerodayinitiative.com/advisories/ZDI-15-067 · Note