Description
Control Center PRO 6.2.9 contains a stack-based buffer overflow vulnerability in the user creation module's username field that allows attackers to overwrite Structured Exception Handler (SEH). Attackers can craft a malicious payload exceeding 664 bytes to inject shellcode and potentially execute arbitrary code on vulnerable Windows systems.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
WEBGATE Inc. Control Center PRO
6.2.9affected
References
- https://www.exploit-db.com/exploits/47645 ↗
- http://www.webgateinc.com/wgi/eng/products/list.php?ec_idx1=P610 ↗
- http://www.webgateinc.com/wgi/eng/products/list.php?ec_idx1=P610&ptype=view&page=&p_idx=90&tab=download&#tabdown ↗
- https://www.vulncheck.com/advisories/control-center-pro-local-stack-based-bufferoverflow ↗