CVE-2019-7231

The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker

published June 24, 2019

CVSS
—
EPSS
7%
Percentile
93.9
In the wild
Unconfirmed
What it is

The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker. This overflow is handled, but terminates the process. An authenticated attacker can send a FTP command string of 472 bytes or more to overflow a buffer, causing an exception that terminates the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06660 · 93.9th percentile
Published
2019-06-24T19:32Z
EPSS history
Timeline
  • 24 JUN 19:32Z
    The ABB IDAL FTP server is vulnerable to a buffer overflow when a long string is sent by an authenticated attacker
    cvelistv5