#VU12590 Buffer overflow in FactoryTalk Activation Manager - CVE-2015-8277

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU12590

#VU12590 Buffer overflow in FactoryTalk Activation Manager - CVE-2015-8277

Published: May 10, 2018 / Updated: April 7, 2020


Vulnerability identifier: #VU12590
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/U:Amber
CVE-ID: CVE-2015-8277
CWE-ID:
Exploitation vector: Remote access
Exploit availability: Public exploit is available
Vulnerable software:
FactoryTalk Activation Manager
Software vendor:
Rockwell Automation

Description

The vulnerability allows a remote unauthenticated attacker to execute arbitrary code on the target system.

The weakness exists in the custom string copying function of the license server manager due to improper bounds checking on incoming data. A remote attacker can send specially crafted packet with opcode (a) 0x107 or (b) 0x10a, trigger memory corruption and execute arbitrary code.

Successful exploitation of the vulnerability may result in system compromise.


Remediation

Update to version 4.02.

External links