Lucene search

K
zdiAnonymousZDI-14-425
HistoryDec 12, 2014 - 12:00 a.m.

Trihedral VTScada Integer Overflow Denial of Service Vulnerability

2014-12-1200:00:00
Anonymous
www.zerodayinitiative.com
13

EPSS

0.082

Percentile

94.5%

This vulnerability allows remote attackers to cause a denial of service to vulnerable installations of Trihedral VTScada. Authentication is not required to exploit this vulnerability. The specific flaw exists within the included HTTP server. By providing a small negative content length, an attacker is able to cause an integer overflow, resulting in the allocation of too small a buffer. The resulting heap overwrite will terminate the HTTP server.

EPSS

0.082

Percentile

94.5%