Buffer Overflow Vulnerability in Pro-face GP-Pro EX Software by Pro-face
CVE-2016-2292

6.5MEDIUM

Key Information:

Vendor
Schneider Electric
Status
Proface Gp-pro Ex Pfxexedls
Proface Gp-pro Ex Pfxexedv
Proface Gp-pro Ex Ex-ed
Proface Gp-pro Ex Pfxexgrpls
Vendor
CVE Published:
6 April 2016

Summary

A stack-based buffer overflow in the Pro-face GP-Pro EX software versions prior to 4.05.000 enables remote attackers to execute arbitrary code. The vulnerability arises from improper handling of user inputs, which can be exploited through various vectors, leading to potential unauthorized actions or system compromise. Users of the affected products should apply the necessary updates to mitigate the risks associated with this vulnerability.

References

https://ics-cert.us-cert.gov/advisories/ICSA-16-096-01
x_refsource_MISC

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.