ID:2324 - Exploit for Buffer overflow in FactoryTalk Activation Manager - CVE-2015-8277

Link to public exploit:

Vulnerability description

The vulnerability allows a remote unauthenticated attacker to execute arbitrary code on the target system.

The weakness exists in the custom string copying function of the license server manager due to improper bounds checking on incoming data. A remote attacker can send specially crafted packet with opcode (a) 0x107 or (b) 0x10a, trigger memory corruption and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.

Remediation