CVE-2012-1832
critical
CVSS v3
—
CVSS v2
10.0
VIR risk
10.0
Description
WellinTech KingView 6.53 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds read) via a crafted packet to (1) TCP or (2) UDP port 2001.
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: cret@cert.org — http://www.wellintech.com/index.php/news/33-patch-for-kingview653
Vendor advisory: cret@cert.org — http://www.us-cert.gov/control_systems/pdf/ICSA-12-185-01.pdf
References
CWEs
CWE-119
Verify integrity in audit chain (admin only). AS-IS.