ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-8272

—
CVSS 3.1
9.8 critical
EPSS
4%p90
Published
()
Modified
Description

UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

Vendors
uvncsiemens
Products
ultravnc, sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc, sinumerik pcu base win7 software\/ipc
Weakness
CWE-193
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (3.9%)

In the news

No ingested article mentions this CVE yet.