CVE-2020-14498

תיאור (מקור, אנגלית)

HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.

מדדים

CVSS 3.1

10.0 (CRITICAL) מקור הציון: NVD CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS — סבירות ניצול

4% (אחוזון 100) נכון ל-18/9/2026

CWE

CWE-121, CWE-787

מוצרים מושפעים

hms-networks: ecatcher

קישורים

• https://www.cisa.gov/news-events/ics-advisories/icsa-20-210-03
• https://www.hms-networks.com/cybersecurity/security-advisories
• https://us-cert.cisa.gov/ics/advisories/icsa-20-210-03 Third Party AdvisoryUS Government Resource
• https://www.hms-networks.com/cybersecurity/security-advisories