CVE-2019-10967: Emerson Ovation OCR400 Firmware

High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days.

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.

Affected products

• Emerson Ovation OCR400 Firmware: up to and including 3.3.1

Published 2019-05-28. Last modified 2026-06-17.