CVE-2018-8847 - Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution

CRITICAL

Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution

Published Jul 13, 2018

9.8

CRITICAL

CVSS 3.1

EPSS 6.75%

Eaton 9000X DriveA versions 2.0.29 and prior has a stack-based buffer overflow vulnerability, which may allow remote code execution.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
Versions 2.0.29 and prior	affected	-

No remediation recorded yet.

Weaknesses (2)

CWE-121

CWE-787

Out-of-bounds Write

Link	Providers	Tags
http://www.eaton.com/content/dam/eaton/company/news-insights/cybersecurity/security-bulletins/Eaton_9000X_Drive.pdf		x_refsource_MISCVendor Advisory
http://www.securityfocus.com/bid/104736		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-20455		Advisory
https://ics-cert.us-cert.gov/advisories/ICSA-18-193-01		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource