PatchTheCVEmicrosys vulnerabilities
Recent CVEs affecting microsys products. 5 tracked.
microsys has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2016-01-26. Highest priority: CVE-2014-9205 (score 49/100).
- CVE-2016-0869 MEDIUM 5.0 UPGRADE Heap-based buffer overflow in MICROSYS PROMOTIC before 8.3.11 allows remote authenticated users to cause a den
- CVE-2014-9205 HIGH 7.5 UPGRADE Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICR
- CVE-2011-4520 MEDIUM 4.3 UPGRADE Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers t
- CVE-2011-4519 MEDIUM 4.3 UPGRADE Stack-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers
- CVE-2011-4518 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 a
FAQ
How do I fix microsys vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is microsys being exploited right now?
None of the tracked microsys CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which microsys CVE should I patch first?
CVE-2014-9205 currently ranks highest (49/100): Stack-based buffer overflow in the PmBase64Decode function in an unspecified demonstration application in MICR.