ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-8268

—
CVSS 3.1
9.8 critical
EPSS
4%p90
Published
()
Modified
Description

UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1207.

Vendors
uvncsiemens
Products
ultravnc, sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc, sinumerik pcu base win7 software\/ipc
Weakness
CWE-193
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news

No ingested article mentions this CVE yet.