CVE-2015-2095

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-03-09 · updated 2026-06-17
Weakness: CWE-119

Description

Heap-based buffer overflow in the SetConnectInfo function in the WESPPTZ.WESPPTZCtrl.1 ActiveX control in WebGate eDVR Manager allows remote attackers to execute arbitrary code via crafted arguments.

Affected products

Webgateinc Edvr Manager: 2.6.4

References

http://www.securityfocus.com/bid/73222
http://www.zerodayinitiative.com/advisories/ZDI-15-070/
http://www.securityfocus.com/bid/73222
http://www.zerodayinitiative.com/advisories/ZDI-15-070/

Get alerted when CVE-2015-2095 or the next vulnerability affects your stack