An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution via the \xB0\x00\x3c byte sequence.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HUci Idol2
APPUci≤ 2.12
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEDeserialization
Related vulnerabilities
CVE-2024-45166CRITICAL9.8PL ✓ten sam produkt
RCE i DoS w UCI IDOL 2 przez błędną deserializację i przepełnienie bufora
CVE-2024-45167CRITICAL9.8PL ✓ten sam produkt
RCE i DoS w UCI IDOL 2 przez improper input validation i deserializację
CVE-2024-45168CRITICAL9.1PL ✓ten sam produkt
UCI IDOL 2: brak uwierzytelnienia w komunikacji przez raw socket
CVE-2024-45165MEDIUM5.3ten sam produkt
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and ser...