Lucene search

K
nvd[email protected]NVD:CVE-2014-9205
HistoryMar 29, 2015 - 10:59 a.m.

CVE-2014-9205

2015-03-2910:59:02
CWE-119
web.nvd.nist.gov
1

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

High

EPSS

0.149

Percentile

95.8%

Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.

Affected configurations

Nvd
Node
microsyspromoticRange8.2.18stable
OR
microsyspromoticRange8.3.1development
VendorProductVersionCPE
microsyspromotic*cpe:2.3:a:microsys:promotic:*:*:*:*:stable:*:*:*
microsyspromotic*cpe:2.3:a:microsys:promotic:*:*:*:*:development:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

8

Confidence

High

EPSS

0.149

Percentile

95.8%