In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: icscert
Published: 2019-05-28T21:54:26
Updated: 2024-08-04T22:40:15.689Z
Reserved: 2019-04-08T00:00:00
Link: CVE-2019-10965
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2019-05-28T22:29:00.607
Modified: 2023-03-24T18:28:09.800
Link: CVE-2019-10965
Redhat
No data.