PT-2025-31534 · Undefined · Undefined

Published 2025-07-31 · Updated 2025-07-31 · CVE-2013-10036

NVD

CVSS v4.0

8.4

High

Base vector

AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2013-10036

Affected Products

Undefined

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2013-10036 · Security Note
• https://fortiguard.com/encyclopedia/ips/37394/beetel-connection-manager-netconfig-username-buffer-overflow · Note
• https://vulncheck.com/advisories/beetel-connection-manager-stack-based-buffer-overflow · Note
• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb · Note
• https://exploit-db.com/exploits/28969 · Note