VULNERABILITY INTELLIGENCE
CVE-2014-0770
CVSS score7.5 HIGH
EPSS probability2.62%
CISA KEVNot currently listed
Published2014-04-12
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
By providing an overly long string to the UserName parameter, an attacker may be able to overflow the static stack buffer. The attacker may then execute code on the target device remotely.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
- CWE-121: Stack-based Buffer Overflow
Primary references
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource