CVE-2009-0270

2009-01-2619:30:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2009-0270

buffer overflow

pxeservice.exe

fujitsu systemcastwizard lite

remote code execution

udp protocol

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.1 High

AI Score

Confidence

Low

0.288 Low

EPSS

Percentile

96.9%

JSON

Stack-based buffer overflow in PXEService.exe in Fujitsu SystemcastWizard Lite 2.0A, 2.0, 1.9, and earlier allows remote attackers to execute arbitrary code via a large PXE protocol request in a UDP packet.

Affected configurations

NVD

Node

fujitsusystemcastwizard_liteRange≤2.0a

fujitsusystemcastwizard_liteMatch1.7

fujitsusystemcastwizard_liteMatch1.8

fujitsusystemcastwizard_liteMatch1.8a

fujitsusystemcastwizard_liteMatch1.9

fujitsusystemcastwizard_liteMatch2.0

CPENameOperatorVersion
fujitsu:systemcastwizard_litefujitsu systemcastwizard litele2.0a
fujitsu:systemcastwizard_litefujitsu systemcastwizard liteeq1.7
fujitsu:systemcastwizard_litefujitsu systemcastwizard liteeq1.8
fujitsu:systemcastwizard_litefujitsu systemcastwizard liteeq1.8a
fujitsu:systemcastwizard_litefujitsu systemcastwizard liteeq1.9
fujitsu:systemcastwizard_litefujitsu systemcastwizard liteeq2.0

CPE	Name	Operator	Version
fujitsu:systemcastwizard_lite	fujitsu systemcastwizard lite	le	2.0a
fujitsu:systemcastwizard_lite	fujitsu systemcastwizard lite	eq	1.7
fujitsu:systemcastwizard_lite	fujitsu systemcastwizard lite	eq	1.8
fujitsu:systemcastwizard_lite	fujitsu systemcastwizard lite	eq	1.8a
fujitsu:systemcastwizard_lite	fujitsu systemcastwizard lite	eq	1.9
fujitsu:systemcastwizard_lite	fujitsu systemcastwizard lite	eq	2.0