CVE-2013-10036
Last modified
CVE-2013-10036 is a high-severity vulnerability rated 8.4/10 on the CVSS scale. A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.. EPSS estimates a 0.41% chance of exploitation in the next 30 days.
Description
A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2013-10036?
How severe is CVE-2013-10036?
How do I fix CVE-2013-10036?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-10030A vulnerability, which was classified as problematic, has be…7.5
- CVE-2013-10031Plack-Middleware-Session versions before 0.17 may be vulnera…7.5
- CVE-2013-10032An authenticated remote code execution vulnerability exists …8.8
- CVE-2013-10033An unauthenticated SQL injection vulnerability exists in Kim…9.3
- CVE-2013-10034An unrestricted file upload vulnerability exists in Kaseya K…9.3
- CVE-2013-10035A code injection vulnerability exists in ProcessMaker Open S…8.7
- CVE-2013-10037An OS command injection vulnerability exists in WebTester ve…9.3
- CVE-2013-10038An unauthenticated arbitrary file upload vulnerability exist…9.3
- CVE-2013-10039A command injection vulnerability exists in GestioIP 3.0 com…8.7
- CVE-2013-1004WebKit, as used in Apple iTunes before 11.0.3, allows man-in…
- CVE-2013-10040ClipBucket version 2.6 and earlier contains a critical vulne…9.8
- CVE-2013-10041Rejected reason: This CVE has the been REJECTED and will not…
Are you affected by CVE-2013-10036?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST