Published: 22/07/2021 Updated: 03/08/2021

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 695

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote malicious users to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; (4) AudioOnlySiteChannel function in the WESPPlayback.WESPPlaybackCtrl.1 control; (5) Connect or (6) ConnectEx function in the WESPPTZ.WESPPTZCtrl.1 control; (7) SiteChannel property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 control; or (9) OpenDVrSSite function in the WESPPTZ.WESPPTZCtrl.1 control.

Vulnerable Product	Search on Vulmon	Subscribe to Product
webgateinc edvr manager -

<html> <!-- # Exploit Title: WebGate eDVR Manager SiteChannel Property Stack Buffer Overflow # Date: 01st April, 2015 # Exploit Author: Praveen Darshanam # Vendor Homepage: wwwwebgateinccom/wgi/eng/ # Software Link: wwwwebgateinccom/wgi_htdocs/eng/dcenter/viewphp?id=wgi_eng&page=1&sn1=&divpage=1&sn=off&am ...

<html> <!-- # Exploit Title: WebGate eDVR Manager AudioOnlySiteChannel Property Stack Buffer Overflow # Date: 01st April, 2015 # Exploit Author: Praveen Darshanam # Vendor Homepage: wwwwebgateinccom/wgi/eng/ # Software Link: wwwwebgateinccom/wgi_htdocs/eng/dcenter/viewphp?id=wgi_eng&page=1&sn1=&divpage=1& ...

<html> <!-- Author: Praveen Darshanam blogdisectscom darshanamsblogspotcom # Exploit Title: WebGate eDVR Manager SiteName Stack Overflow SEH Overwrite (0Day) # Date: 27th March, 2015 # Vendor Homepage: wwwwebgateinccom/wgi/eng/ # Software Link: wwwwebgateinccom/wgi_htdocs/eng/dcenter/viewphp?id=wgi_eng ...

CWE-120 http://www.zerodayinitiative.com/advisories/ZDI-15-065/http://www.zerodayinitiative.com/advisories/ZDI-15-064/http://www.zerodayinitiative.com/advisories/ZDI-15-066/http://www.zerodayinitiative.com/advisories/ZDI-15-058/http://www.zerodayinitiative.com/advisories/ZDI-15-061/http://www.zerodayinitiative.com/advisories/ZDI-15-060/https://nvd.nist.gov https://www.exploit-db.com/exploits/36606/

CVE-2015-2098

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect