Vulnerability Details CVE-2019-10965
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.098
EPSS Ranking 92.6%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2019-10965
-
cpe:2.3:h:emerson:ovation_ocr400:-
-
cpe:2.3:o:emerson:ovation_ocr400_firmware:3.3.1