Overview
- Description
- Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.
- Source
- ics-cert@hq.dhs.gov
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
- nvd@nist.gov
- CWE-189
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "484C73EE-529B-46EE-9B2F-009EC6E524D9",
"versionEndExcluding": "9.1.20",
"versionStartIncluding": "6.5"
},
{
"criteria": "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D41BC6F8-1088-44D0-9B91-EE6546D04772",
"versionEndExcluding": "10.2.22",
"versionStartIncluding": "10.0"
},
{
"criteria": "cpe:2.3:a:trihedral:vtscada:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DDBE315F-99C1-4A04-9E17-C95BBBD238DD",
"versionEndExcluding": "11.1.07",
"versionStartIncluding": "11.0"
}
],
"operator": "OR"
}
]
}
]