VULNERABILITY INTELLIGENCE
CVE-2014-9205
CVSS score7.5 HIGH
EPSS probability4.75%
CISA KEVNot currently listed
Published2015-03-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Primary references
- ics-cert@hq.dhs.gov — Vendor Advisory
- ics-cert@hq.dhs.gov
- ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource