Approved changes feed: RSS · Atom

cpe:2.3:o:emerson:ovation_ocr400_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorEmerson (f912a02b-4be0-550b-a08d-4ea8860069db)
ProductOvation Ocr400 Firmware (237f5b54-8fa7-5bff-8cc4-65cf66f80baf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10967 vulnerable 2026-06-08 05:12:26.098260 Details available
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.
Published: 2019-05-28T21:59:06.000Z
Updated: 2024-08-04T22:40:15.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10965 vulnerable 2026-06-08 05:12:26.091062 Details available
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.
Published: 2019-05-28T21:54:26.000Z
Updated: 2024-08-04T22:40:15.689Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.