ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2019-8275

—
CVSS 3.1
9.8 critical
EPSS
4%p90
Published
()
Modified
Description

UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.

Vendors
uvncsiemens
Products
ultravnc, sinumerik access mymachine\/p2p, sinumerik pcu base win10 software\/ipc, sinumerik pcu base win7 software\/ipc
Weakness
CWE-170
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (4.0%)

In the news

No ingested article mentions this CVE yet.