HMS Industrial Networks AB eCatcher all versions prior to 6.5.5 is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute arbitrary code.
CVSS 3.1CRITICAL 10.0·Network·No auth·No interaction·EPSS 0.03984·Published 2020-08-26·Fixed in 6.5.5CWE-121
In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of norma…