What is CVE-2015-2099?

CVE-2015-2099 is a high-severity vulnerability in Webgateinc Control Center, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.8/10. Published 2021-07-22.

How severe is CVE-2015-2099?

High severity. CVSS v3 base score is 8.8 out of 10.

Buffer overflow in Webgateinc Control Center

CVE-2015-2099

Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function in the FileConverter.FileConverterCtrl.1 control, (2) Login function in the LoginContoller.LoginControllerCtrl.1 control, or (3) GetThumbnail function in the WESPPlayback.WESPPlaybackCtrl.1 control.

Vulnerability class: Buffer Overflow

EPSS: 0.141 (96.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.

Affected products

Webgateinc Control_center
N/a — versions n/a

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2015-2099?: CVE-2015-2099 is a high-severity vulnerability in Webgateinc Control Center, classified under Buffer Copy without Checking Size of Input (Classic Buffer Overflow). CVSS score: 8.8/10. Published 2021-07-22.
How severe is CVE-2015-2099?: High severity. CVSS v3 base score is 8.8 out of 10.