CVE-2015-0986

Name of the Vulnerable Software and Affected Versions Moxa VPort ActiveX SDK Plus versions prior to 2.8

Description The issue involves multiple stack-based buffer overflows that allow remote attackers to execute arbitrary code via specific vectors, including regkey set or get commands. This can be achieved by manipulating the GetClientReg Name Parameter.

Recommendations For versions prior to 2.8, update to version 2.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the regkey set and get commands to minimize the risk of exploitation. Avoid using the GetClientReg Name Parameter in sensitive operations until the issue is resolved.