CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: in emerson ovation ocr400 controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party ftp server involves improper handling of a long command to the ftp service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2019-05-28
Last Modified Date: 2019-05-29