Lucene search

K
cvelistIcscertCVELIST:CVE-2019-18257
HistoryDec 17, 2019 - 10:28 p.m.

CVE-2019-18257

2019-12-1722:28:49
CWE-121
icscert
www.cve.org
5

AI Score

10

Confidence

High

EPSS

0.086

Percentile

94.5%

In Advantech DiagAnywhere Server, Versions 3.07.11 and prior, multiple stack-based buffer overflow vulnerabilities exist in the file transfer service listening on the TCP port. Successful exploitation could allow an unauthenticated attacker to execute arbitrary code with the privileges of the user running DiagAnywhere Server.

CNA Affected

[
  {
    "product": "Advantech DiagAnywhere Server",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions 3.07.11 and prior"
      }
    ]
  }
]

AI Score

10

Confidence

High

EPSS

0.086

Percentile

94.5%

Related for CVELIST:CVE-2019-18257