CVE-2019-10967CWE-121

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper…

published May 28, 2019

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03682 · 89.6th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2019-05-28T21:59Z
EPSS history
Timeline
  • 28 MAY 21:59Z
    In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper…
    cvelistv5