CVE-2009-1628: Unisys Business Information Server

High severity, CVSS 10.0. EPSS: 5.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in mnet.exe in Unisys Business Information Server (BIS) 10 and 10.1 on Windows allows remote attackers to execute arbitrary code via a crafted TCP packet.

Affected products

• Unisys Business Information Server: version 10 only; version 10.1 only

Published 2009-06-26. Last modified 2026-06-16.