PT-2019-2569
CVE-2019-7231
·
Publicado
2019-06-13
·
Atualizado
2022-12-01
Descrição por
CVSS 3.1
5.7
MédiaMétricasAV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
ABB IDAL FTP server (affected versions not specified)
Description
The issue is related to a buffer overflow in the ABB IDAL FTP server. When an authenticated attacker sends a long string, specifically a FTP command string of 472 bytes or more, it can overflow a buffer. This overflow is handled but results in the termination of the server process, effectively causing a denial of service. The exploitation of this issue can allow a remote attacker to terminate the server by sending commands that exceed the 472-byte limit.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Explorabilidade
Exploit
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾