CVEvulnerability
CVE-2015-2099
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-07-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, (2) Login function in the LoginContoller.LoginControllerCtrl.1 control, or (3) GetThumbnail function in the WESPPlayback.WESPPlaybackCtrl.1 control.
Affected configurations
• webgateinc control center
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- http://www.zerodayinitiative.com/advisories/ZDI-15-055/ Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-15-056/ Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-15-063/ Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-15-055/ Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-15-056/ Third Party Advisory, VDB Entry
- http://www.zerodayinitiative.com/advisories/ZDI-15-063/ Third Party Advisory, VDB Entry