CVE-2019-14198 | BDVDB-2026-120100 Detail

SiemensRUGGEDCOM ROX MX5000

Description#

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://gitlab.com/u-boot/u-boot
https://blog.semmle.com/uboot-rce-nfs-vulnerability/
https://cert-portal.siemens.com/productcert/html/ssa-577017.html

Exploit#

No public exploit known

History#

Version 12019-07-31Record published in the CVE List.
Version 22026-05-12Most recent update recorded in the CVE List.