CVE-2019-10967

🗓️ 28 May 2019 21:59:06Reported by icscertType

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges

Reporter	Title	Published	Views	Family All 6
Cvelist	CVE-2019-10967	28 May 201921:59	–	cvelist
EUVD	EUVD-2019-2681	7 Oct 202500:30	–	euvd
ICS	Emerson Ovation OCR400 Controller	28 May 201900:00	–	ics
NVD	CVE-2019-10967	28 May 201922:29	–	nvd
Prion	Stack overflow	28 May 201922:29	–	prion
Tenable Nessus	Emerson Ovation OCR400 Controller Stack-Based Buffer Overflow (CVE-2019-10967)	8 Aug 202400:00	–	nessus

NVD

Vulners

Node

emerson ovation_ocr400_firmwareRange≤3.3.1

AND

emerson ovation_ocr400Match-

[
  {
    "product": "Emerson Ovation OCR400 Controller",
    "vendor": "Emerson",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to and including v3.3.1"
      }
    ]
  }
]

Source	Link
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-19-148-01
securityfocus	www.securityfocus.com/bid/108499

21 Nov 2024 04:20Current

9.2High risk

Vulners AI Score9.2

CVSS 26.5

CVSS 3.18.8

EPSS0.06131