exploitDog

CVE-2018-8847

Опубликовано: 13 июл. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

Ссылки

http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton_9000X_Drive.pdf
Vendor Advisory
http://www.securityfocus.com/bid/104736
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-193-01
Mitigation
Third Party Advisory
US Government Resource
http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton_9000X_Drive.pdf
Vendor Advisory
http://www.securityfocus.com/bid/104736
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-193-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:eaton:9000x_firmware:*:*:*:*:*:*:*:*

Версия до 2.0.29 (включая)

cpe:2.3:h:eaton:9000x:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13865

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-121

CWE-787

Связанные уязвимости

GHSA-v547-ggh4-4xpf

CVSS3: 9.8

github

больше 3 лет назад

Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

EPSS

Процентиль: 94%

0.13865

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-121

CWE-787