Moxa.VPort.ActiveX.SDK.Plus.Stack.Buffer.Overflow

Description

This indicates an attack attempt to exploit a Buffer Overflow vulnerability in Moxa VPort.
The vulnerability, which is located in an ActiveX control, can be exploited through misuse of a vulnerable method. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious webpage and execute arbitrary code within the context of the application.

Affected Products

MxNVR-MO4 Series prior to version 2.8
VPort 26A-1MP Series prior to version 2.8
VPort 351 prior to version 2.8
VPort 354 prior to version 2.8
VPort 36-1MP Series prior to version 2.8
VPort 364A Series prior to version 2.8
VPort 451 prior to version 2.8
VPort 461 prior to version 2.8
VPort 56-2MP Series prior to version 2.8
VPort P06-1MP-M12 prior to version 2.8
VPort P06HC-1MP-M12 Series prior to version 2.8
VPort P16-1MP-M12 Series prior to version 2.8
VPort P16-1MP-M12-IR Series prior to version 2.8

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www.moxa.com/support/download.aspx?d_id=2114

References