CVE-2019-8263

🗓️ 05 Mar 2019 15:00:00Reported by KasperskyType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 55 Views

UltraVNC revision 1205 stack-based buffer overflow vulnerability in VNC client cod

Reporter	Title	Published	Views	Family All 9
CNVD	UltraVNC Arbitrary Code Execution Vulnerability	7 Mar 201900:00	–	cnvd
Cvelist	CVE-2019-8263	5 Mar 201915:00	–	cvelist
EUVD	EUVD-2019-17661	7 Oct 202500:30	–	euvd
ICS	Siemens SINUMERIK	9 Jun 202000:00	–	ics
ICS	Siemens SINAMICS Medium Voltage Products Remote Access (Update B)	11 May 202100:00	–	ics
ICS	Siemens SIMATIC UltraVNC HMI WinCC Products	11 May 202100:00	–	ics
NVD	CVE-2019-8263	5 Mar 201915:29	–	nvd
Prion	Stack overflow	5 Mar 201915:29	–	prion
Tenable Nessus	UltraVNC < 1.2.2.4 Multiple Vulnerabilities	19 Aug 202500:00	–	nessus

NVD

Node

uvnc ultravncRange<1.2.2.3

Node

siemens sinumerik_access_mymachine/p2pRange<4.8

siemens sinumerik_pcu_base_win10_software/ipcRange<14.00

siemens sinumerik_pcu_base_win7_software/ipcRange≤12.01

[
  {
    "product": "UltraVNC",
    "vendor": "Kaspersky Lab",
    "versions": [
      {
        "status": "affected",
        "version": "1.2.2.3"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.gov/ics/advisories/icsa-20-161-06
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-286838.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-940818.pdf
ics-cert	www.ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-21-131-11
ics-cert	www.ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-010-ultravnc-stack-based-buffer-overflow/

21 Nov 2024 04:49Current

6.5Medium risk

Vulners AI Score6.5

CVSS 24.3

CVSS 3.16.5

EPSS0.00832