CVE-2019-8280
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 4.2%
probabilidad de explotación
4.2%top 10% de las CVE
explotación observada
noninguna fuente lo reporta
UltraVNC revision 1203 has out-of-bounds access vulnerability in VNC client inside RAW decoder, which can potentially result code execution. This attack appear to be exploitable via network connectivity. This vulnerability has been fixed in revision 1204.
Productos afectados
Kaspersky Lab · UltraVNCReferencias
https://cert-portal.siemens.com/productcert/pdf/ssa-286838.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdfhttps://cert-portal.siemens.com/productcert/pdf/ssa-940818.pdfhttps://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-009-ultravnc-access-of-memory-location-after-end-of-buffer/https://us-cert.cisa.gov/ics/advisories/icsa-21-131-11https://www.us-cert.gov/ics/advisories/icsa-20-161-06