Lucene search

K
nvd[email protected]NVD:CVE-2015-4647
HistoryJul 06, 2015 - 2:59 p.m.

CVE-2015-4647

2015-07-0614:59:04
CWE-119
web.nvd.nist.gov
4

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.719

Percentile

98.1%

Multiple stack-based buffer overflows in Ipropsapi in Panasonic Security API (PS-API) ActiveX SDK before 8.10.18 allow remote attackers to execute arbitrary code via a long string in the (1) FilePassword property or to the (2) GetStringInfo method.

Affected configurations

Nvd
Node
panasonicsecurity_api_activex_sdkRange8.10.14
VendorProductVersionCPE
panasonicsecurity_api_activex_sdk*cpe:2.3:a:panasonic:security_api_activex_sdk:*:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.7

Confidence

Low

EPSS

0.719

Percentile

98.1%