Critical severity9.8NVD Advisory· Published Mar 8, 2019· Updated Jun 17, 2026
CVE-2019-8275
CVE-2019-8275
Description
UltraVNC revision 1211 has multiple improper null termination vulnerabilities in VNC server code, which result in out-of-bound data being accessed by remote users. This attack appears to be exploitable via network connectivity. These vulnerabilities have been fixed in revision 1212.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6- cpe:2.3:a:siemens:sinumerik_access_mymachine\/p2p:*:*:*:*:*:*:*:*Range: <4.8
- cpe:2.3:a:siemens:sinumerik_pcu_base_win10_software\/ipc:*:*:*:*:*:*:*:*Range: <14.00
- cpe:2.3:a:siemens:sinumerik_pcu_base_win7_software\/ipc:*:*:*:*:*:*:*:*Range: <=12.01
- Kaspersky Lab/UltraVNCv5Range: 1.2.2.3
Patches
Vulnerability mechanics
References
6- cert-portal.siemens.com/productcert/pdf/ssa-927095.pdfnvdThird Party Advisory
- ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-022-ultravnc-improper-null-termination/nvdThird Party Advisory
- www.us-cert.gov/ics/advisories/icsa-20-161-06nvdThird Party AdvisoryUS Government Resource
- cert-portal.siemens.com/productcert/pdf/ssa-286838.pdfnvd
- cert-portal.siemens.com/productcert/pdf/ssa-940818.pdfnvd
- us-cert.cisa.gov/ics/advisories/icsa-21-131-11nvd
News mentions
0No linked articles in our index yet.