Lucene search
HistoryNov 16, 2009 - 8:30 p.m.
CVE-2009-3947
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8.3
Confidence
High
EPSS
0.137
Percentile
95.7%
Buffer overflow in the FTP service on the Tandberg MXP F7.0 allows remote attackers to cause a denial of service (process crash or device reboot) or possibly execute arbitrary code via a long USER command, as demonstrated by a command ending with many space characters.
Affected configurations
Node
tandbergtandberg_mxp_endpointsMatchf7.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| tandberg | tandberg_mxp_endpoints | f7.0 | cpe:2.3:a:tandberg:tandberg_mxp_endpoints:f7.0:*:*:*:*:*:*:* |
Related
exploitdb
exploitdb
Tandberg MXP F7.0 - 'USER' Remote Buffer Overflow (PoC)
2009-07-13 00:00:00
cve
cve
CVE-2009-3947
2009-11-16 20:30:00
cvelist
cvelist
CVE-2009-3947
2009-11-16 20:00:00
openvas
openvas
prion
prion
Buffer overflow
2009-11-16 20:30:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
8.3
Confidence
High
EPSS
0.137
Percentile
95.7%
Related for NVD:CVE-2009-3947