Lucene search
HistoryMar 29, 2015 - 10:59 a.m.
CVE-2014-9205
cve-2014-9205
buffer overflow
pmbase64decode
microsys promotic
remote code execution
8.3 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.149 Low
EPSS
Percentile
95.8%
Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsys:promotic | microsys promotic | le | 8.3.1 |
| microsys:promotic | microsys promotic | le | 8.2.18 |
Related
prion
prion
Stack overflow
2015-03-29 10:59:00
checkpoint_advisories
checkpoint_advisories
Microsys Promotic PmBase64Decode Buffer Overflow (CVE-2014-9205)
2015-04-13 00:00:00
ics
ics
MICROSYS PROMOTIC Stack Buffer Overflow
2018-08-27 12:00:00
zdi
zdi
MICROSYS PROMOTIC Stack Buffer Overflow Remote Code Execution Vulnerability
2015-03-12 00:00:00
8.3 High
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.149 Low
EPSS
Percentile
95.8%
Related for CVE-2014-9205