CVE-2017-12732CWE-121
A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior
published October 5, 2017
What it is
A Stack-based Buffer Overflow issue was discovered in GE CIMPLICITY Versions 9.0 and prior. A function reads a packet to indicate the next packet length. The next packet length is not verified, allowing a buffer overwrite that could lead to an arbitrary remote code execution.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.00750 · 54.2th percentile
- Weakness
- CWE-121 · Stack-based Buffer Overflow
- Published
- 2017-10-05T21:00Z
EPSS history
Timeline