CVE-2015-2097

{"id": "CVE-2015-2097", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "[email protected]", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-03-09T14:59:15.170", "references": [{"url": "http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "http://seclists.org/fulldisclosure/2015/Feb/90", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "http://www.osvdb.org/118893", "source": "[email protected]"}, {"url": "http://www.osvdb.org/118896", "source": "[email protected]"}, {"url": "http://www.osvdb.org/118902", "source": "[email protected]"}, {"url": "http://www.securityfocus.com/bid/72835", "source": "[email protected]"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-059/", "source": "[email protected]"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-062/", "source": "[email protected]"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-068/", "source": "[email protected]"}, {"url": "https://www.exploit-db.com/exploits/36505/", "source": "[email protected]"}, {"url": "https://www.exploit-db.com/exploits/36602/", "tags": ["Exploit"], "source": "[email protected]"}, {"url": "https://www.exploit-db.com/exploits/36607/", "source": "[email protected]"}, {"url": "http://packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://seclists.org/fulldisclosure/2015/Feb/90", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/118893", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/118896", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.osvdb.org/118902", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/72835", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-059/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-062/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.zerodayinitiative.com/advisories/ZDI-15-068/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/36505/", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/36602/", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://www.exploit-db.com/exploits/36607/", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de buffer en WebGate Embedded Standard Protocol (WESP) SDK permiten a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados en la funci\u00f3n (1) LoadImage o (2) LoadImageEx en el control WESPMonitor.WESPMonitorCtrl.1, (3) en la funci\u00f3n ChangePassword en el control WESPCONFIGLib.UserItem, en la funci\u00f3n Connect en el control (4) WESPSerialPort.WESPSerialPortCtrl.1 o (5) WESPPLAYBACKLib.WESPPlaybackCtrl o (6) en la funci\u00f3n AddID en el control WESPCONFIGLib.IDList o (7) en una cadena larga en el segundo argumento en la funci\u00f3n ConnectEx3 en el control WESPPLAYBACKLib.WESPPlaybackCtrl."}], "lastModified": "2025-04-12T10:46:40.837", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:webgate:webgate_embedded_standard_protocol_sdk:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7184E0B9-F721-4850-8301-E63E157034FB"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}