PT-2016-5993

CVE-2016-4512

·

Published

2016-07-03

·

Updated

2017-08-07

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Eaton ELCSoft versions 2.4.01 and earlier
Description The issue is related to a stack-based buffer overflow in the ELCSimulator component. This allows remote attackers to execute arbitrary code via a long packet.
Recommendations For versions 2.4.01 and earlier, update to a version later than 2.4.01 to resolve the issue.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2016-4512
ZDI-16-407
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com