CVE-2018-5452 A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [ProConOS v.4.01.280] firmware: CWM v.05.78.00 and p...
HighCVSS 7.5
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Stack-based Buffer Overflow issue was discovered in Emerson Process Management ControlWave Micro Process Automation Controller: ControlWave Micro [ProConOS v.4.01.280] firmware: CWM v.05.78.00 and prior. A stack-based buffer overflow vulnerability caused by sending crafted packets on Port 20547 could force the PLC to change its state into halt mode.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emerson controlwave micro firmware | <= 05.78.00 | No fix listed |
References
- 103180 third-party-advisory vdb-entry
- ics-cert.us-cert.gov third-party-advisory us-government-resource