VULNERABILITY INTELLIGENCE
CVE-2009-20005
CVSS score9.3 CRITICAL
EPSS probability1.68%
CISA KEVNot currently listed
Published2025-09-16
Last modified2026-10-01
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
A stack-based buffer overflow exists in the UtilConfigHome.csp endpoint of InterSystems Caché 2009.1. The vulnerability is triggered by sending a specially crafted HTTP GET request containing an oversized argument to the .csp handler. Due to insufficient bounds checking, the input overflows a stack buffer, allowing an attacker to overwrite control structures and execute arbitrary code. It is unknown if this vulnerability was patched and an affected version range remains undefined.
Weakness classification
- CWE-121: Stack-based Buffer Overflow