PT-2020-5985 · Hms Industrial Networks · Ecatcher

Sharon Brizinov · Published 2020-07-28 · Updated 2024-01-23 · CVE-2020-14498

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions HMS Industrial Networks AB eCatcher versions prior to 6.5.5

Description The issue is caused by a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

Recommendations For versions prior to 6.5.5, update to version 6.5.5 or later to resolve the issue.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

BDU:2021-02297

CVE-2020-14498

Affected Products

Ecatcher

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2020-14498 · Security Note
• https://bdu.fstec.ru/vul/2021-02297 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14498 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03 · Note
• https://t.me/ckure/5043 · Telegram Post
• https://us-cert.gov/ics/advisories/icsa-20-210-03 · Note
• https://t.me/rnetsec/12965 · Telegram Post
• https://t.me/cvenotify/68271 · Telegram Post
• https://t.me/true_secator/802 · Telegram Post
• https://t.me/defcon_news/53230 · Telegram Post
• https://hms-networks.com/cybersecurity/security-advisories · Note
• https://t.me/true_secator/2362 · Telegram Post
• https://t.me/thehackernews/786 · Telegram Post
• https://t.me/secharvester/9602 · Telegram Post