Description
Control Center PRO 6.2.9 contains a stack-based buffer overflow vulnerability in the user creation module's username field that allows attackers to overwrite Structured Exception Handler (SEH). Attackers can craft a malicious payload exceeding 664 bytes to inject shellcode and potentially execute arbitrary code on vulnerable Windows systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WEBGATE | Control Center PRO | 6.2.9 | — |
References
- ExploitDB-47645 exploit
- Vendor Homepage product
- Software Download Page product
- VulnCheck Advisory: Control Center PRO 6.2.9 - Local Stack Based BufferOverflow third-party-advisory