CVE-2019-25435

Katalog CVE

CVSS 7.8 · High EPSS 0,34%

Kerentanan Stack-based Buffer Overflow pada sricam deviceviewer. Skor CVSS 3.1 7.8 (High) menurut vulncheck.com.

Deskripsi (NVD)

Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.

Rincian

Terbit di NVD

20 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

7.8 (High), sumber vulncheck.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-121: Stack-based Buffer Overflow

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/sricam-deviceviewer-local-buffer-overflow-dep-bypass advisory pihak ketiga
• https://www.exploit-db.com/exploits/47477 exploit · vdb entry
• https://www.sricam.com/ product