CVE-2015-2098
HIGHWebGate eDVR Manager - Remote Code Execution via Stack-Based Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2015-2098. PoCs published by Praveen Darshanam.
AI-analyzed exploit summary This exploit targets a stack buffer overflow in WebGate eDVR Manager via the SiteChannel property of WESPPlaybackCtrl. It uses a crafted string with NOP sleds and shellcode to achieve remote code execution on vulnerable systems.
Description
Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; (4) AudioOnlySiteChannel function in the WESPPlayback.WESPPlaybackCtrl.1 control; (5) Connect or (6) ConnectEx function in the WESPPTZ.WESPPTZCtrl.1 control; (7) SiteChannel property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 control; or (9) OpenDVrSSite function in the WESPPTZ.WESPPTZCtrl.1 control.
Exploits (3)
This exploit targets a stack buffer overflow in WebGate eDVR Manager via the SiteChannel property of WESPPlaybackCtrl. It uses a crafted string with NOP sleds and shellcode to achieve remote code execution on vulnerable systems.
This exploit targets a stack buffer overflow in WebGate eDVR Manager via the AudioOnlySiteChannel property. It uses a crafted HTML file with JavaScript to trigger the vulnerability, leading to arbitrary code execution via shellcode.
This exploit targets a stack-based buffer overflow in WebGate eDVR Manager's WESPPlayback.WESPPlaybackCtrl.1 ActiveX control via the SiteName property. It leverages SEH overwrite with a custom payload to achieve remote code execution (calc.exe).
References (6)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H