high7.8Public exploit code
CVE-2019-13494
nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SNMPc Enterprise Edition 9/10 - Mapping Filename Buffer Overflow2019-07-11 · local · windows
Impact
nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Castlerock | Simple Network Management Protocol Console | before 9.0.12.1 from 10.0.0 before 10.0.9 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html
- https://www.mogozobo.com/?p=3534
- http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html
- https://www.mogozobo.com/?p=3534