PT-2017-16413 · Eview · Eview Ev-07S Gps Tracker

Deral Heiland · Published 2017-03-27 · Updated 2017-03-31 · CVE-2017-5238

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Eview EV-07S GPS Tracker (affected versions not specified)

Description The issue is caused by a lack of bounds checking in several input configuration fields, leading to data overflow from one variable to another, resulting in the overwrite of another field's data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-5238

Affected Products

Eview Ev-07S Gps Tracker

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-5238 · Security Note
• http://securityfocus.com/bid/97194 · Note
• https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities · Note