CVE-2019-10967 Memory corruption in Emerson Ovation OCR400 Controller
A stack-based buffer overflow in the FTP server allows remote attackers to execute arbitrary code and escalate privileges on Emerson Ovation controllers.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-10967?
CVE-2019-10967 is a high-severity memory corruption vulnerability in Emerson Ovation OCR400 Controller, published on 28 May 2019. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.
Which versions are affected by CVE-2019-10967?
It affects 1 product.
Products include Emerson Ovation Ocr400 Firmware.
How do I fix CVE-2019-10967?
No fix has been published for CVE-2019-10967 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-10967 being exploited?
There is no known exploitation of CVE-2019-10967 in the wild and no public exploit code.
Other vulnerabilities in Emerson Ovation OCR400 Controller
Sources
Also known as GHSA-6chh-6wqr-3697.