CVE-2015-2098

· HIGHModified

← All CVEs

CVSS v3.1

8.8

EPSS

13.98%

Published

Jul 22, 2021

Modified

Nov 20, 2024

Public PoC / Exploit (4)

All weaponized →

TrickestTrickest PoC index Exploit-DBWebGate eDVR Manager 2.6.4 - AudioOnlySiteChannel Stack Buffer Overflow Exploit-DBWebGate eDVR Manager 2.6.4 - SiteChannel Property Stack Buffer Overflow Exploit-DBWebGate eDVR Manager 2.6.4 - SiteName Stack Overflow

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; (4) AudioOnlySiteChannel function in the WESPPlayback.WESPPlaybackCtrl.1 control; (5) Connect or (6) ConnectEx function in the WESPPTZ.WESPPTZCtrl.1 control; (7) SiteChannel property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 control; or (9) OpenDVrSSite function in the WESPPTZ.WESPPTZCtrl.1 control.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-120

Affected Products (1)

webgateinc · edvr_managervulnerable

References (12)

http://www.zerodayinitiative.com/advisories/ZDI-15-058/

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-15-060/

Third Party AdvisoryVDB Entry

http://www.zerodayinitiative.com/advisories/ZDI-15-061/