CVE-2019-10965: Buffer Overflow
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2019-10965.
What is the affected software?
The affected software is Emerson Ovation OCR400 Controller 3.3.1 and earlier.
What is the severity of CVE-2019-10965?
The severity of CVE-2019-10965 is high with a CVSS score of 8.8.
What is the description of CVE-2019-10965?
CVE-2019-10965 is a heap-based buffer overflow vulnerability in the embedded third-party FTP server of Emerson Ovation OCR400 Controller 3.3.1 and earlier, which can lead to memory corruption, controller halting, or remote code execution.
How can the CVE-2019-10965 vulnerability be exploited?
The vulnerability can be exploited by sending a long command to the FTP service, causing memory corruption and potentially leading to remote code execution.