Details of VAR-201905-1058

ID

VAR-201905-1058

CVE

CVE-2019-10965

TITLE

Emerson Ovation OCR400 Controller Buffer error vulnerability

Trust: 0.8

sources: JVNDB: JVNDB-2019-004871

DESCRIPTION

In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges. Emerson Ovation OCR400 Controller Contains a buffer error vulnerability.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Emerson Ovation OCR400 Controller is prone to stack-based buffer overflow and heap-based buffer overflow vulnerabilities. Attackers can exploit these issues to execute arbitrary code in the context of the affected application. Failed exploit attempts will result in denial-of-service conditions. Emerson Electric Ovation OCR400 Controller is a logic controller of Emerson Electric (Emerson Electric). This vulnerability stems from the incorrect verification of data boundaries when the network system or product performs operations on the memory, resulting in incorrect read and write operations to other associated memory locations

Trust: 1.98

sources: NVD: CVE-2019-10965 // JVNDB: JVNDB-2019-004871 // BID: 108499 // VULHUB: VHN-142564

AFFECTED PRODUCTS

vendor:	emerson	model:	ovation ocr400	scope:	lte	version:	3.3.1	Trust: 1.8
vendor:	emerson	model:	ovation controller ocr400	scope:	eq	version:	0	Trust: 0.3
vendor:	emerson	model:	ovation	scope:	eq	version:	3.3.1	Trust: 0.3
vendor:	emerson	model:	ovation	scope:	eq	version:	3.1	Trust: 0.3
vendor:	emerson	model:	ovation	scope:	eq	version:	3.0.4	Trust: 0.3
vendor:	emerson	model:	ovation	scope:	eq	version:	2.0	Trust: 0.3

sources: BID: 108499 // JVNDB: JVNDB-2019-004871 // NVD: CVE-2019-10965

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-10965
value:	HIGH
Trust: 1.0
NVD:	CVE-2019-10965
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201905-1043
value:	HIGH
Trust: 0.6
VULHUB:	VHN-142564
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2019-10965
severity:	MEDIUM
baseScore:	6.5
vectorString:	AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-142564
severity:	MEDIUM
baseScore:	6.5
vectorString:	AV:N/AC:L/AU:S/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.0
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2019-10965
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
NVD:	CVE-2019-10965
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-142564 // JVNDB: JVNDB-2019-004871 // CNNVD: CNNVD-201905-1043 // NVD: CVE-2019-10965

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.1
problemtype:	CWE-119	Trust: 0.9

sources: VULHUB: VHN-142564 // JVNDB: JVNDB-2019-004871 // NVD: CVE-2019-10965

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201905-1043

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201905-1043

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-004871

PATCH

title:	Top Page	url:	https://www.emerson.com/en-us/	Trust: 0.8
title:	Emerson Electric Ovation OCR400 Controller Buffer error vulnerability fix	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=92993	Trust: 0.6

sources: JVNDB: JVNDB-2019-004871 // CNNVD: CNNVD-201905-1043

EXTERNAL IDS

db:	ICS CERT	id:	ICSA-19-148-01	Trust: 2.8
db:	NVD	id:	CVE-2019-10965	Trust: 2.8
db:	BID	id:	108499	Trust: 2.0
db:	JVNDB	id:	JVNDB-2019-004871	Trust: 0.8
db:	CNNVD	id:	CNNVD-201905-1043	Trust: 0.7
db:	AUSCERT	id:	ESB-2019.1910	Trust: 0.6
db:	VULHUB	id:	VHN-142564	Trust: 0.1

sources: VULHUB: VHN-142564 // BID: 108499 // JVNDB: JVNDB-2019-004871 // CNNVD: CNNVD-201905-1043 // NVD: CVE-2019-10965

REFERENCES

url:	https://ics-cert.us-cert.gov/advisories/icsa-19-148-01	Trust: 2.8
url:	http://www.securityfocus.com/bid/108499	Trust: 2.3
url:	https://nvd.nist.gov/vuln/detail/cve-2019-10965	Trust: 1.4
url:	http://emerson.com	Trust: 0.9
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-10965	Trust: 0.8
url:	https://www.auscert.org.au/bulletins/esb-2019.1910/	Trust: 0.6

sources: VULHUB: VHN-142564 // BID: 108499 // JVNDB: JVNDB-2019-004871 // CNNVD: CNNVD-201905-1043 // NVD: CVE-2019-10965

CREDITS

VDLab, a collaboration of Venustech and Dongfang Electric Corporation (DEC), reported these vulnerabilities to NCCIC.,a collaboration of Venustech and Dongfang Electric Corporation (DEC)

Trust: 0.6

sources: CNNVD: CNNVD-201905-1043

SOURCES

db:	VULHUB	id:	VHN-142564
db:	BID	id:	108499
db:	JVNDB	id:	JVNDB-2019-004871
db:	CNNVD	id:	CNNVD-201905-1043
db:	NVD	id:	CVE-2019-10965

LAST UPDATE DATE

2024-11-23T22:55:32.721000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-142564	date:	2020-08-24T00:00:00
db:	BID	id:	108499	date:	2019-05-28T00:00:00
db:	JVNDB	id:	JVNDB-2019-004871	date:	2019-06-11T00:00:00
db:	CNNVD	id:	CNNVD-201905-1043	date:	2020-08-25T00:00:00
db:	NVD	id:	CVE-2019-10965	date:	2024-11-21T04:20:15.537

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-142564	date:	2019-05-28T00:00:00
db:	BID	id:	108499	date:	2019-05-28T00:00:00
db:	JVNDB	id:	JVNDB-2019-004871	date:	2019-06-11T00:00:00
db:	CNNVD	id:	CNNVD-201905-1043	date:	2019-05-28T00:00:00
db:	NVD	id:	CVE-2019-10965	date:	2019-05-28T22:29:00.607