CVE-2018-8847 Memory corruption in Eaton 9000X Drive
A stack-based buffer overflow in Eaton 9000X DriveA allows remote attackers to execute arbitrary code on the device.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-8847?
CVE-2018-8847 is a critical memory corruption vulnerability in ICS-CERT Eaton 9000X Drive, published on 13 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.
Which versions are affected by CVE-2018-8847?
It affects 1 product.
Products include Eaton 9000x Firmware.
How do I fix CVE-2018-8847?
No fix has been published for CVE-2018-8847 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-8847 being exploited?
There is no known exploitation of CVE-2018-8847 in the wild and no public exploit code.
Sources
Also known as GHSA-v547-ggh4-4xpf.