CVE-2019-8258

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1880%

EPSS Percentile4.62th

Published2019年3月5日

Last Modified2024年11月21日

Vulnerability Description

UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1199.

Affected Platforms (CPE)

📦

Uvnc

Ultravnc

< 1.2.2.3

📦

Siemens

Sinumerik Access Mymachine\/p2p

< 4.8

📦

Siemens

Sinumerik Pcu Base Win10 Software\/ipc

< 14.00

📦

Siemens

Sinumerik Pcu Base Win7 Software\/ipc

<= 12.01

References & Advisories

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-004-ultravnc-heap-based-buffer-overflow/

🔗 https://www.us-cert.gov/ics/advisories/icsa-20-161-06

🔗 https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf

🔗 https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-004-ultravnc-heap-based-buffer-overflow/

🔗 https://www.us-cert.gov/ics/advisories/icsa-20-161-06

Vulnerability Description

Affected Platforms (CPE)

Ultravnc

Sinumerik Access Mymachine\/p2p

Sinumerik Pcu Base Win10 Software\/ipc

Sinumerik Pcu Base Win7 Software\/ipc

References & Advisories

相关漏洞威胁