What’s Vulnerable › Vulnerabilities

CVE-2014-9205

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-03-29 · updated 2026-06-17
• Weakness: CWE-119

Description

Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICROSYS PROMOTIC stable before 8.2.19 and PROMOTIC development before 8.3.2 allows remote attackers to execute arbitrary code by providing a large amount of data.

Affected products

• Microsys Promotic: through 8.2.18; through 8.3.1

References

• http://www.promotic.eu/en/pmdoc/News.htm
• http://www.zerodayinitiative.com/advisories/ZDI-15-091/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01
• http://www.promotic.eu/en/pmdoc/News.htm
• http://www.zerodayinitiative.com/advisories/ZDI-15-091/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-062-01

Get alerted when CVE-2014-9205 or the next vulnerability affects your stack