An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Due to improper input validation, improper deserialization, and improper restriction of operations within the bounds of a memory buffer, IDOL2 is vulnerable to Denial-of-Service (DoS) attacks and possibly remote code execution. There is an access violation and EIP overwrite after five logins.
The vulnerability results from a combination of three irregularities: lack of proper input validation, improper data deserialization, and memory buffer boundary violations. After five login attempts, a memory access violation occurs and the EIP register is overwritten, which is a classic symptom of an exploitable buffer overflow. The attacker can control the value of the instruction pointer, which opens the way for arbitrary code execution.
A remote, unauthenticated attacker can cause service unavailability (DoS) or potentially execute arbitrary code on the targeted system with the privileges of the application process. Complete system compromise is possible in case of successful EIP register overwrite exploitation.
Apply patches available from the manufacturer according to the references. A client version is available at the address indicated by the manufacturer (uci.de). Until an update is applied, it is recommended to restrict network access to the application only to trusted hosts and monitor repeated login attempts.
UCI IDOL 2 (uciIDOL, IDOL2) in all versions up to and including 2.12
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HUci Idol2
APPUci≤ 2.12
Related vulnerabilities
RCE i DoS w UCI IDOL 2 przez improper input validation i deserializację
UCI IDOL 2: brak uwierzytelnienia w komunikacji przez raw socket
RCE i DoS w UCI IDOL 2 przez nieprawidłową deserializację i walidację danych
An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is sent between client and ser...