CVE-2019-13494

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-07-12 · updated 2026-06-17
Weakness: CWE-787

Description

nodeimp.exe in Castle Rock SNMPc before 9.0.12.1 and 10.x before 10.0.9 has a stack-based buffer overflow via a long variable string in a Map Objects text file.

Affected products

Castlerock Simple Network Management Protocol Console: before 9.0.12.1; from 10.0.0 before 10.0.9 — fixed in 10.0.9, 9.0.12.1

How to fix

Upgrade to a fixed version: Castlerock Simple Network Management Protocol Console 10.0.9, 9.0.12.1. Check the vendor advisory for mitigations.

References

http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html
https://www.mogozobo.com/?p=3534
http://packetstormsecurity.com/files/153612/SNMPc-Enterprise-Edition-9-10-Mapping-Filename-Buffer-Overflow.html
https://www.mogozobo.com/?p=3534

Get alerted when CVE-2019-13494 or the next vulnerability affects your stack