PT-2024-31149

CVE-2024-44415

·

Published

2024-10-11

·

Updated

2024-10-15

Description by

CVSS 3.1
6.5
Medium
MetricsAV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions DI 8200 version 16.07.26A1
Description A buffer overflow issue was found in the dbsrv asp function. The strcpy function is executed without checking the length of the string, leading to a buffer overflow.
Recommendations For DI 8200 version 16.07.26A1, as a temporary workaround, consider disabling the dbsrv asp function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾