CVE-2015-1001 — HIGH (10.0)

Vulnerability Description

Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Ininet Solutions	Scada Web Server	-

Related Weaknesses (CWE)

CWE-119

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-293-02Third Party AdvisoryUS Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-293-02Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2015-1001?

CVE-2015-1001 is a vulnerability with a CVSS score of 10.0 (HIGH). Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary code via a long field in an HTTP request.

How severe is CVE-2015-1001?

CVE-2015-1001 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-1001?

Check the references section above for vendor advisories and patch information. Affected products include: Ininet Solutions Scada Web Server.