CVE-2010-5333
CRITICALIntegard Pro/Home <2.0.0.9037 & 2.2.x <2.2.0.9037 - RCE
Title source: llmDescription
The web server in Integard Pro and Home before 2.0.0.9037 and 2.2.x before 2.2.0.9037 has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. An SEH-overwrite buffer overflow already existed for the vulnerable software. This CVE is to track an alternate exploitation method, utilizing an EIP-overwrite buffer overflow.
Exploits (3)
exploitdb
WORKING POC
VERIFIED
by Lincoln_ Nullthreat_ rick2600 · rubyremotewindows_x86
https://www.exploit-db.com/exploits/14941
metasploit
WORKING POC
GREAT
by Lincoln, Nullthreat, rick2600 · rubypocwin
https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/integard_password_bof.rb
References (5)
Scores
CVSS v3
9.8
EPSS
0.7702
EPSS Percentile
98.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-120
Status
published
Affected Products (2)
integard_home_project/integard_home
< 2.0.0.9037
integard_pro_project/integard_pro
< 2.0.0.9037
Timeline
Published
Sep 13, 2019
Tracked Since
Feb 18, 2026