CVE-2021-27417

Katalog CVE

CVSS 9.8 · Critical EPSS 0,60%

Kerentanan Integer Overflow or Wraparound pada ecoscentric ecospro. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow.

Rincian

Terbit di NVD

3 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,60% peluang dieksploitasi; lebih tinggi dari 47,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.ecoscentric.com/show_bug.cgi?id=1002437 permissions required · advisory vendor
• https://www.cisa.gov/uscert/ics/advisories/icsa-21-119-04 advisory pihak ketiga · pemerintah AS