QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2015-2097

Back to search

CVE-2015-2097

Published: Mar 9, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control.

VendorProductVersions

n/a

n/a

affected
n/a

References

118902
vdb-entry
x_refsource_OSVDB
118893
vdb-entry
x_refsource_OSVDB
36607
exploit
x_refsource_EXPLOIT-DB
36505
exploit
x_refsource_EXPLOIT-DB
72835
vdb-entry
x_refsource_BID
36602
exploit
x_refsource_EXPLOIT-DB
118896
vdb-entry
x_refsource_OSVDB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now