CVE-2019-7711

CVE-2019-7711 affects the Interpeak IPCOMShell TELNET server in Green Hills INTEGRITY RTOS 5.0.4. The vulnerability arises from an undocumented shell command, "prompt", which sets the shell’s prompt value and is used as a format string input to printf, enabling an information leak of memory addre...

CVE-2019-7712

The CVE-2019-7712 issue affects Green Hills INTEGRITY RTOS 5.0.4, specifically the Interpeak IPCOMShell TELNET server. When a user runs pwd, the current working directory path is passed as the first argument to printf() without proper validation, enabling an attacker to craft a path with format s...

CVE-2019-7714

CVE-2019-7714 affects Interpeak IPWEBS on Green Hills INTEGRITY RTOS 5.0.4. The issue is a stack-based buffer overflow caused by copying the HTTP Authentication header without validating header size, with a fixed 60-byte header allocation. Public details in the provided documents do not specify a...

CVE-2019-7713

The vulnerability CVE-2019-7713 affects Green Hills INTEGRITY RTOS 5.0.4, specifically the Interpeak IPCOMShell TELNET server. A heap-based buffer overflow occurs in the function that prints the shell prompt when a custom modifier expands information (e.g., process ID, IP address, current directo...

CVE-2019-7715

CVE-2019-7715 affects Green Hills INTEGRITY RTOS 5.0.4 via the Interpeak IPCOMShell TELNET server. The main shell handler uses the environment variable ipcom.shell.greeting as the first argument to printf(), making it possible for an attacker to supply a user-controlled format string during login...