CVE-2019-8272: Critical severity ultravnc vulnerability
Published Mar 1, 2019
·Updated
UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
Affected Software
4 affected components
Uvnc Ultravnc<1.2.2.3
Siemens Sinumerik Access Mymachine\/p2p<4.8
Siemens Sinumerik Pcu Base Win10 Software\/ipc<14.00
Siemens Sinumerik Pcu Base Win7 Software\/ipc<=12.01
Event History
Mar 8, 2019
CVE Published
11:29 PM
Data Sourced
via NVD·11:29 PM
DescriptionSeverityWeaknessAffected Software
Mar 9, 2019
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-8272?
CVE-2019-8272 has a high severity rating due to its potential to enable code execution through off-by-one vulnerabilities.
2
How do I fix CVE-2019-8272?
To fix CVE-2019-8272, update to UltraVNC revision 1212 or later.
3
Which versions of UltraVNC are affected by CVE-2019-8272?
CVE-2019-8272 affects UltraVNC versions before revision 1212.
4
Is the CVE-2019-8272 vulnerability exploitative over the network?
Yes, the vulnerabilities in CVE-2019-8272 can be exploited via network connectivity.
5
Are other software products affected by CVE-2019-8272?
Yes, Siemens' Sinumerik Access MyMachine/P2P and PCU Base software for both Windows 10 and Windows 7 are also affected by CVE-2019-8272.