PT-2020-12228 · Visam+1 · Visam Vbase Web-Remote Module+2

Published 2020-04-03 · Updated 2020-04-06 · CVE-2020-10599

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VISAM VBASE Editor version 11.5.0.2 VISAM VBASE Web-Remote Module

Description The issue is related to a vulnerable ActiveX component that can be exploited, resulting in a buffer overflow. This may lead to a denial-of-service condition and execution of arbitrary code.

Recommendations For VISAM VBASE Editor version 11.5.0.2, consider disabling the vulnerable ActiveX component to prevent exploitation until a patch is available. For VISAM VBASE Web-Remote Module, restrict access to the module to minimize the risk of exploitation.

Fix

Buffer Overflow

Stack Overflow

Weakness Enumeration

CWE-120

CWE-121

Related Identifiers

CVE-2020-10599

Affected Products

Activex

Visam Vbase Editor

Visam Vbase Web-Remote Module

References · 4

• https://osv.dev/vulnerability/CVE-2020-10599 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10599 · Security Note
• https://t.me/cvenotify/2406 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-20-084-01 · Note