Siemens Sinumerik Pcu Base WIN10 Software/ipc vulnerabilities

13 CVEs affecting Siemens Sinumerik Pcu Base WIN10 Software/ipc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-8277, published 2019-03-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-8274, published 2019-03-08. Critical severity, CVSS 9.8. EPSS: 8.3% chance of exploitation in the next 30 days. UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer offer handler, which can potentially in result code execution. This attack appears to be…
CVE-2019-8273, published 2019-03-08. Critical severity, CVSS 9.8. EPSS: 8.3% chance of exploitation in the next 30 days. UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be…
CVE-2019-8271, published 2019-03-08. Critical severity, CVSS 9.8. EPSS: 8.3% chance of exploitation in the next 30 days. UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer handler, which can potentially result code execution. This attack appears to be exploitable via…
CVE-2019-8276, published 2019-03-08. High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days. UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be…
CVE-2019-8269, published 2019-03-08. High severity, CVSS 7.5. EPSS: 5.7% chance of exploitation in the next 30 days. UltraVNC revision 1206 has stack-based Buffer overflow vulnerability in VNC client code inside FileTransfer module, which leads to a denial of service (DoS) condition. This attack appear to be…
CVE-2019-8262, published 2019-03-05. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. UltraVNC revision 1203 has multiple heap buffer overflow vulnerabilities in VNC client code inside Ultra decoder, which results in code execution. This attack appears to be exploitable via network…
CVE-2019-8258, published 2019-03-05. Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days. UltraVNC revision 1198 has a heap buffer overflow vulnerability in VNC client code which results code execution. This attack appears to be exploitable via network connectivity. This vulnerability has…
CVE-2019-8275, published 2019-03-08. Critical severity, CVSS 9.8. EPSS: 4% chance of exploitation in the next 30 days. UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be…
CVE-2019-8272, published 2019-03-08. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. UltraVNC revision 1211 has multiple off-by-one vulnerabilities in VNC server code, which can potentially result in code execution. This attack appears to be exploitable via network connectivity.…
CVE-2019-8268, published 2019-03-08. Critical severity, CVSS 9.8. EPSS: 3.9% chance of exploitation in the next 30 days. UltraVNC revision 1206 has multiple off-by-one vulnerabilities in VNC client code connected with improper usage of ClientConnection::ReadString function, which can potentially result code execution.…

Latest

CVE-2019-8277, published 2019-03-08. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. UltraVNC revision 1211 contains multiple memory leaks (CWE-665) in VNC server code, which allows an attacker to read stack memory and can be abused for information disclosure. Combined with another…
CVE-2019-8263, published 2019-03-05. Medium severity, CVSS 6.5. EPSS: 2.5% chance of exploitation in the next 30 days. UltraVNC revision 1205 has stack-based buffer overflow vulnerability in VNC client code inside ShowConnInfo routine, which leads to a denial of service (DoS) condition. This attack appear to be…