Approved changes feed: RSS · Atom

cpe:2.3:h:emerson:ovation_ocr400:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorEmerson (f912a02b-4be0-550b-a08d-4ea8860069db)
ProductOvation Ocr400 (812ea3e0-10bc-5311-a933-8403dbf2a415)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10967 not_vulnerable 2026-06-08 05:12:26.098285 Details available
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a stack-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long file name from the LIST command to the FTP service, which may cause the service to overwrite buffers, leading to remote code execution and escalation of privileges.
Published: 2019-05-28T21:59:06.000Z
Updated: 2024-08-04T22:40:15.538Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10965 not_vulnerable 2026-06-08 05:12:26.091952 Details available
In Emerson Ovation OCR400 Controller 3.3.1 and earlier, a heap-based buffer overflow vulnerability in the embedded third-party FTP server involves improper handling of a long command to the FTP service, which may cause memory corruption that halts the controller or leads to remote code execution and escalation of privileges.
Published: 2019-05-28T21:54:26.000Z
Updated: 2024-08-04T22:40:15.689Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.