CVE-2019-12518
CRITICALAnviz CrossChex 4.3.8.0 and 4.3.12 - Buffer Overflow
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2019-12518.
PoCs published by Metasploit, Luis Catarino <[email protected]>, Pedro Rodrigues <[email protected]>, agalway-r7, adfoster-r7, including Metasploit module exploits/windows/misc/crosschex_device_bof.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Anviz CrossChex by responding to a broadcast with a crafted UDP packet, overwriting EIP to redirect execution to a 'JMP ESP' instruction, leading to arbitrary code execution.
Description
Anviz CrossChex access control management software 4.3.8.0 and 4.3.12 is vulnerable to a buffer overflow vulnerability.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in Anviz CrossChex by responding to a broadcast with a crafted UDP packet, overwriting EIP to redirect execution to a 'JMP ESP' instruction, leading to arbitrary code execution.
This Metasploit module exploits a stack buffer overflow in Anviz CrossChex by responding to a broadcast with a crafted UDP packet, overwriting the saved EIP to redirect execution to a 'JMP ESP' instruction, leading to arbitrary code execution.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H