Lucene search

K
cve[email protected]CVE-2015-1000
HistoryJun 05, 2015 - 10:59 a.m.

CVE-2015-1000

2015-06-0510:59:02
CWE-119
web.nvd.nist.gov
21
cve-2015-1000
buffer overflow
rtspvideo
activex control
moxa softcms
security vulnerability
remote code execution

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.117 Low

EPSS

Percentile

95.3%

Stack-based buffer overflow in the OpenForIPCamTest method in the RTSPVIDEO.rtspvideoCtrl.1 (aka SStreamVideo) ActiveX control in Moxa SoftCMS before 1.3 allows remote attackers to execute arbitrary code via the StrRtspPath parameter.

Affected configurations

NVD
Node
moxasoftcmsRange1.2
CPENameOperatorVersion
moxa:softcmsmoxa softcmsle1.2

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.3 High

AI Score

Confidence

Low

0.117 Low

EPSS

Percentile

95.3%

Related for CVE-2015-1000