CVE-2010-5333

CRITICAL

Integard Pro/Home <2.0.0.9037 & 2.2.x <2.2.0.9037 - RCE

Title source: llm

Description

The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is to track an alternate exploitation method, utilizing an EIP-overwrite buffer overflow.

Exploits (3)

exploitdb WORKING POC VERIFIED
by Lincoln_ Nullthreat_ rick2600 · rubyremotewindows_x86
https://www.exploit-db.com/exploits/14941
metasploit WORKING POC GREAT
by Lincoln, Nullthreat, rick2600 · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/integard_password_bof.rb
exploitdb WORKING POC
by Node · rubyremotewindows
https://www.exploit-db.com/exploits/15016

Scores

CVSS v3 9.8
EPSS 0.7702
EPSS Percentile 98.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-120
Status published

Affected Products (2)

integard_home_project/integard_home < 2.0.0.9037
integard_pro_project/integard_pro < 2.0.0.9037

Timeline

Published Sep 13, 2019
Tracked Since Feb 18, 2026