What’s Vulnerable › Vulnerabilities

CVE-2002-1780

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2002-12-31 · updated 2026-06-16

Description

BPM Studio Pro 4.2 by ALCATech GmbH includes a webserver that allows a remote attacker to cause a denial of service (crash) by sending a URL request for a MS-DOS device such as con. NOTE: it has been disputed that this and possibly other application-level DOS device issues stem from a bug in Windows, and as such, such applications should not be considered vulnerable themselves.

Affected products

• Alcatech Gmbh Bpm Studio Pro: 4.2

References

• http://online.securityfocus.com/archive/1/258644
• http://online.securityfocus.com/archive/1/258986
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8299
• http://online.securityfocus.com/archive/1/258644
• http://online.securityfocus.com/archive/1/258986
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8299

Get alerted when CVE-2002-1780 or the next vulnerability affects your stack