CVE-2019-10974 - NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code

Back Back to CVE browser

MEDIUM

NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code

Published Jul 25, 2019

5.5

MEDIUM

CVSS 3.1

EPSS 0.34%

Description

NREL EnergyPlus, Versions 8.6.0 and possibly prior versions, The application fails to prevent an exception handler from being overwritten with arbitrary code.

Affected products

Vendor National Renewable Energy Laboratory (NREL) Product EnergyPlus Default
unknown
Affected
- Versions 8.6.0 and possibly prior versions

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
National Renewable Energy Laboratory (NREL)	EnergyPlus	unknown	Affected Versions 8.6.0 and possibly prior versions

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-121

CWE-787

Out-of-bounds Write

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2688
Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-204-02
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-2688		Advisory
https://www.us-cert.gov/ics/advisories/icsa-19-204-02		x_refsource_MISCThird Party AdvisoryUS Government Resource

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner icscert

Published Jul 25, 2019

Updated Aug 4, 2024

Reserved Apr 8, 2019

Link CVE-2019-10974

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-10974

Red Hat

No data

ENISA EUVD

Assigner icscert

Published Jul 25, 2019

Updated Aug 4, 2024

Link EUVD-2019-2688

GitHub

No data