CVE-2019-10967

State: Published
Severity: Not scored
Published: May 28, 2019
Updated: Aug 4, 2024
Reserved: Apr 8, 2019

Description

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.

Scores

The record has no CVSS score.

Weaknesses

CWE-121 Stack-Based Buffer Overflow CWE-121

Affected Products

Product	Versions
Emerson Ovation OCR400 ControllerEmerson	All versions prior to and including v3.3.1Affected

References

https://ics-cert.us-cert.gov/advisories/ICSA-19-148-01
108499vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.