Description (CNA)
Integer overflow in Trihedral Engineering VTScada (formerly VTS) 6.5 through 9.x before 9.1.20, 10.x before 10.2.22, and 11.x before 11.1.07 allows remote attackers to cause a denial of service (server crash) via a crafted request, which triggers a large memory allocation.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Trihedral Engineering / VTS | affected 6.5 before 9.1.19; affected 10 before 10.2.21 |
CWE
CWE-190
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-14-343-02
- http://www.securityfocus.com/bid/71591
- http://www.trihedral.com/help/#Op_Welcome/Wel_UpgradeNotes.htm
ADP enrichment
No English description supplied.