What’s Vulnerable › Vulnerabilities

CVE-2019-25357: Control Center PRO 6.2.9 - Local Stack Based BufferOverflow

• Severity: high (CVSS 8.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-18 · updated 2026-06-17
• Weakness: CWE-121

Description

Control Center PRO 6.2.9 contains a stack-based buffer overflow vulnerability in the user creation module's username field that allows attackers to overwrite Structured Exception Handler (SEH). Attackers can craft a malicious payload exceeding 664 bytes to inject shellcode and potentially execute arbitrary code on vulnerable Windows systems.

Affected products

• WEBGATE Inc. Control Center PRO: 6.2.9

References

• http://www.webgateinc.com/wgi/eng/products/list.php?ec_idx1=P610
• http://www.webgateinc.com/wgi/eng/products/list.php?ec_idx1=P610&ptype=view&page=&p_idx=90&tab=download&#tabdown
• https://www.exploit-db.com/exploits/47645
• https://www.vulncheck.com/advisories/control-center-pro-local-stack-based-bufferoverflow

Get alerted when CVE-2019-25357 or the next vulnerability affects your stack