CVE-2015-2099 Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function in the FileConverter.FileConverterCtrl.1...

HighCVSS 8.8 EPSS 14.1% Public exploit

Published: 2021-07-22 20:10
Updated: 2026-06-17 03:23
Exploit status: Public exploit available

Description

Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, (2) Login function in the LoginContoller.LoginControllerCtrl.1 control, or (3) GetThumbnail function in the WESPPlayback.WESPPlaybackCtrl.1 control.

Affected products

Product	Affected versions	Fixed in
webgateinc control center	All versions	No fix listed

References

www.zerodayinitiative.com third-party-advisory vdb-entry
www.zerodayinitiative.com third-party-advisory vdb-entry
www.zerodayinitiative.com third-party-advisory vdb-entry

CVSS v3.1

8.8 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: Required
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.1 8.8 · nvd@nist.gov
v2.0 6.8 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 14.07% (percentile 96.6)
CWE: CWE-120

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

WebGate Control Center 4.8.7 - GetThumbnail Stack Overflow Exploit · Exploit Database (OffSec) · 2015-03-27