CVE-2020-14498: HMS Industrial Networks AB eCatcher Stack-based Buffer Overflow
HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
Other sources
HMS Industrial Networks AB eCatcher all versions prior to 6.5.5. The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HMS Industrial Networks AB eCatcherto a version that resolves this vulnerability.Fixed in 6.5.5
Event History
Frequently Asked Questions
What is CVE-2020-14498?
CVE-2020-14498 is a vulnerability in HMS Industrial Networks AB eCatcher versions prior to 6.5.5 that allows for a remote code execution through a stack-based buffer overflow.
What is the severity of CVE-2020-14498?
CVE-2020-14498 has a severity level of critical.
How does CVE-2020-14498 affect HMS Industrial Networks AB eCatcher?
CVE-2020-14498 affects all versions of HMS Industrial Networks AB eCatcher prior to 6.5.5.
How can an attacker exploit CVE-2020-14498?
An attacker can exploit CVE-2020-14498 by sending specially crafted data to the affected eCatcher software, leading to a stack-based buffer overflow and potential remote code execution.
Is there a fix for CVE-2020-14498?
Yes, updating HMS Industrial Networks AB eCatcher to version 6.5.5 or newer will fix the vulnerability.