exploitDog

CVE-2019-19782

Опубликовано: 13 дек. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 10

EPSS Низкий

Описание

The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.

Ссылки

https://github.com/sketler/sketler.github.io/blob/master/_posts/2019-11-11-AceaXeftp-RCE-Via-Buffer-Overflow.markdown
Exploit
Third Party Advisory
https://sketler.github.io/cve_research/AceaXeftp-RCE-Via-Buffer-Overflow/
Exploit
Third Party Advisory
https://github.com/sketler/sketler.github.io/blob/master/_posts/2019-11-11-AceaXeftp-RCE-Via-Buffer-Overflow.markdown
Exploit
Third Party Advisory
https://sketler.github.io/cve_research/AceaXeftp-RCE-Via-Buffer-Overflow/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:labf:aceaxe_plus:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 78%

0.01134

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-120

Связанные уязвимости

GHSA-grmw-jjw4-fhp5

CVSS3: 9.8

github

больше 3 лет назад

The FTP client in AceaXe Plus 1.0 allows a buffer overflow via a long EHLO response from an FTP server.

EPSS

Процентиль: 78%

0.01134

Низкий

9.8 Critical

CVSS3

10 Critical

CVSS2

Дефекты

CWE-120