CyberSec.Space Logo
Back to CVE Browser

CVE-2019-7712

HIGH
7.5
CVSS Severity Score
EPSS Score0.1200%
EPSS Percentile18.95th
PublishedMar 26, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

An issue was discovered in handler_ipcom_shell_pwd in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. When using the pwd command, the current working directory path is used as the first argument to printf() without a proper check. An attacker may thus forge a path containing format string modifiers to get a custom format string evaluated. This results in an information leak of memory addresses.

Affected Platforms (CPE)

💻
Ghs

Integrity Rtos

= 5.0.4

References & Advisories

🔗 https://github.com/bl4ckic3/GHS-Bugs
🔗 https://www.ghs.com/products/rtos/integrity.html
🔗 https://github.com/bl4ckic3/GHS-Bugs
🔗 https://www.ghs.com/products/rtos/integrity.html

Related Vulnerabilities

CVE-2019-77139.8

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. There is a heap-based buffe...

CVE-2019-77149.8

An issue was discovered in Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. It allocates 60 bytes for the HTTP Authentication...

CVE-2019-77117.5

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The undocumented shell comm...

CVE-2019-77157.5

An issue was discovered in the Interpeak IPCOMShell TELNET server on Green Hills INTEGRITY RTOS 5.0.4. The main shell handler func...