Lucene search

K
kasperskyKaspersky LabKLA10317
HistoryJun 05, 2009 - 12:00 a.m.

KLA10317 ACE vulnerability in SafeNet SoftRemote

2009-06-0500:00:00
Kaspersky Lab
threats.kaspersky.com
28

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.908 High

EPSS

Percentile

98.8%

A buffer overflow was found in SoftRemote. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed request.

Original advisories

Related products

SafeNet-SoftRemote

CVE list

CVE-2009-1943 critical

Solution

Update to latest version

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

  • SafeNet SoftRemote versions 10.8.5 and earlier

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.908 High

EPSS

Percentile

98.8%