CVE-2019-25435

HIGH

Sricam DeviceViewer 3.12.0.1 - Buffer Overflow

Title source: llm

Description

Sricam DeviceViewer 3.12.0.1 contains a local buffer overflow vulnerability in the user management add user function that allows authenticated attackers to execute arbitrary code by bypassing data execution prevention. Attackers can inject a malicious payload through the Username field in User Management to trigger a stack-based buffer overflow and execute commands via ROP chain gadgets.

Exploits (1)

exploitdb WORKING POC
by Alessandro Magnosi · pythonlocalwindows
https://www.exploit-db.com/exploits/47477

Scores

CVSS v3 7.8
EPSS 0.0002
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-121
Status published
Products (2)
sricam/deviceviewer 3.12.0.1
Sricam/Sricam DeviceViewer 3.12.0.1
Published Feb 20, 2026
Tracked Since Feb 21, 2026