CVE-2021-27417
eCosCentric eCosPro RTOS Integer Overflow or Wraparound
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.6EPSS 0.6%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
03 May 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
eCosCentric eCosPro RTOS Versions 2.0.1 through 4.5.3 are vulnerable to integer wraparound in function calloc (an implementation of malloc). The unverified memory assignment can lead to arbitrary memory allocation, resulting in a heap-based buffer overflow.
CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:H
Affected products
eCosCentric · eCosPro RTOSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →