CVE-2019-14195 | BDVDB-2026-120097 Detail

SiemensRUGGEDCOM ROX MX5000

Description#

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gitlab.com/u-boot/u-boot
https://blog.semmle.com/uboot-rce-nfs-vulnerability/
https://cert-portal.siemens.com/productcert/html/ssa-577017.html

Exploit#

No public exploit known

History#

Version 12019-07-31Record published in the CVE List.
Version 22026-05-12Most recent update recorded in the CVE List.