CVE-2015-2097

HIGH 7.5CVE-2015-2097 · Published 09/03/2015 · updated 17/06/2026

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified vectors to the (1) LoadImage or (2) LoadImageEx function in the WESPMonitor.WESPMonitorCtrl.1 control, (3) ChangePassword function in the WESPCONFIGLib.UserItem control, Connect function in the (4) WESPSerialPort.WESPSerialPortCtrl.1 or (5) WESPPLAYBACKLib.WESPPlaybackCtrl control, or (6) AddID function in the WESPCONFIGLib.IDList control or a (7) long string to the second argument to the ConnectEx3 function in the WESPPLAYBACKLib.WESPPlaybackCtrl control.

References

packetstormsecurity.com/files/131072/WebGate-eDVR-Manager-Stack-Buffer-Overflow.html · Exploit
seclists.org/fulldisclosure/2015/Feb/90 · Exploit
osvdb.org/118893
osvdb.org/118896
osvdb.org/118902
securityfocus.com/bid/72835
zerodayinitiative.com/advisories/ZDI-15-059
zerodayinitiative.com/advisories/ZDI-15-062
zerodayinitiative.com/advisories/ZDI-15-068
exploit-db.com/exploits/36505
exploit-db.com/exploits/36602 · Exploit
exploit-db.com/exploits/36607

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free