$ cve CVE-2015-2098 JSON

CVE-2015-2098 EXPLOIT

8.8

HIGH · CVSS 3.1 · EPSS 14% (pctl 96)

Patch early

A public exploit exists.

Description

Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2) ConnectEx, or (3) ConnectEx2 function in the WESPEvent.WESPEventCtrl.1 control; (4) AudioOnlySiteChannel function in the WESPPlayback.WESPPlaybackCtrl.1 control; (5) Connect or (6) ConnectEx function in the WESPPTZ.WESPPTZCtrl.1 control; (7) SiteChannel property in the WESPPlayback.WESPPlaybackCtrl.1 control; (8) SiteName property in the WESPPlayback.WESPPlaybackCtrl.1 control; or (9) OpenDVrSSite function in the WESPPTZ.WESPPTZCtrl.1 control.

Scoring

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	13.98% — more likely to be exploited than 96% of all CVEs
Weakness	CWE-120
On CISA KEV	no
Public exploit	yes
Published	2021-07-22
Last modified	2026-06-17

Affected (1)

Vendor	Product
webgateinc	edvr manager

Public exploits

Source	Title	Date
exploit-db	WebGate eDVR Manager 2.6.4 - AudioOnlySiteChannel Stack Buffer Overflow	2015-04-02
exploit-db	WebGate eDVR Manager 2.6.4 - SiteChannel Property Stack Buffer Overflow	2015-04-02
exploit-db	WebGate eDVR Manager 2.6.4 - SiteName Stack Overflow	2015-03-27

References

→ the Explorer · watch your stack · NVD