CVE Feed

    Dashboard / CVE / CVE-2015-2097

    CVE-2015-2097

    Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control.

    Published:Mar 9, 2015
    Last Modified:Apr 12, 2025
    EPS:Mar 9, 2015
    EPSS Score:0.46293
    CVSS Score:7.5

    Affected Products

    Vendor
    Webgate
    Product
    Webgate Embedded Standard Protocol Sdk

    Exploits

    http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.htmlhttp://seclists.org/fulldisclosure/2015/Feb/90https://www.exploit-db.com/exploits/36602/http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.htmlhttp://seclists.org/fulldisclosure/2015/Feb/90https://www.exploit-db.com/exploits/36602/https://www.exploit-db.com/exploits/36505https://www.exploit-db.com/exploits/36602https://www.exploit-db.com/exploits/36607

    References

    http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html
    http://seclists.org/fulldisclosure/2015/Feb/90
    http://www.osvdb.org/118893
    http://www.osvdb.org/118896
    http://www.osvdb.org/118902
    http://www.securityfocus.com/bid/72835
    http://www.zerodayinitiative.com/advisories/ZDI-15-059/
    http://www.zerodayinitiative.com/advisories/ZDI-15-062/
    http://www.zerodayinitiative.com/advisories/ZDI-15-068/
    https://www.exploit-db.com/exploits/36505/
    https://www.exploit-db.com/exploits/36602/
    https://www.exploit-db.com/exploits/36607/
    http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html
    http://seclists.org/fulldisclosure/2015/Feb/90
    http://www.osvdb.org/118893
    http://www.osvdb.org/118896
    http://www.osvdb.org/118902
    http://www.securityfocus.com/bid/72835
    http://www.zerodayinitiative.com/advisories/ZDI-15-059/
    http://www.zerodayinitiative.com/advisories/ZDI-15-062/
    http://www.zerodayinitiative.com/advisories/ZDI-15-068/
    https://www.exploit-db.com/exploits/36505/
    https://www.exploit-db.com/exploits/36602/
    https://www.exploit-db.com/exploits/36607/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High