What’s Vulnerable › Vulnerabilities

CVE-2014-2597

• Severity: medium (CVSS 4.9 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-04-18 · updated 2026-06-17
• Weakness: CWE-20

Description

PCNetSoftware RAC Server 4.0.4 and 4.0.5 allows local users to cause a denial of service (disabled keyboard or crash) via a large input buffer to unspecified IOCTL requests in RACDriver.sys, which triggers a buffer over-read.

Affected products

• Remote-Rac Rac Server: 4.0.4, 4.0.5

References

• http://seclists.org/fulldisclosure/2014/Apr/221
• http://secunia.com/advisories/58090
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2597/
• http://seclists.org/fulldisclosure/2014/Apr/221
• http://secunia.com/advisories/58090
• https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2597/

Get alerted when CVE-2014-2597 or the next vulnerability affects your stack