CVE-2018-8865 Memory corruption in IDS 2102
A stack-based buffer overflow in Lantech IDS 2102 allows remote attackers to execute arbitrary code without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-8865?
CVE-2018-8865 is a critical memory corruption vulnerability in Lantech IDS 2102, published on 4 May 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
In Lantech IDS 2102 2.0 and prior, a stack-based buffer overflow vulnerability has been identified which may allow remote code execution. A CVSS v3 base score of 9.8 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Which versions are affected by CVE-2018-8865?
It affects 1 product.
Products include Lantech Ids 2102 Firmware.
How do I fix CVE-2018-8865?
No fix has been published for CVE-2018-8865 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2018-8865 being exploited?
There is no known exploitation of CVE-2018-8865 in the wild and no public exploit code.
Other vulnerabilities in Lantech IDS 2102
Sources
Also known as GHSA-rq6r-xw97-qwfr.