Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."
Search vulnerabilities
CVE-2008-5158
CVSS 2.0 · 7.5 High
EPSS 1.8%
KEV · Not listed
Vendors
Products
CVE-2008-5159
Integer overflow in the remote administration protocol processing in Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to cause a denial of service (crash) via a large string length argument, which triggers memory corruption.
CVSS 2.0 · 10.0 Critical
EPSS 59.7%
KEV · Not listed
Vendors
Products
CVE-2008-5176
Multiple buffer overflows in Client Software WinCom LPD Total 3.0.2.623 and earlier allow remote attackers to execute arbitrary code via (1) a long 0x02 command to the remote administration service on TCP port 13500 or (2) a long invalid control filename to LPDService.exe on TCP port 515.
CVSS 2.0 · 9.3 Critical
EPSS 5.7%
KEV · Not listed
Vendors
Products
Page 1 of 1.