CVE-2019-10965

State: Published
Severity: Not scored
Published: May 28, 2019
Updated: Aug 4, 2024
Reserved: Apr 8, 2019

Description

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Emerson Ovation OCR400 ControllerEmerson	All versions prior to and including v3.3.1Affected

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-148-01
108499vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.