CVE-2012-1831
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
Heap-based buffer overflow in WellinTech KingView 6.53 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 555.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cret@cert.org — http://www.wellintech.com/index.php/news/33-patch-for-kingview653
Vendor advisory: cret@cert.org — http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf
References
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.