CVE-2019-8276

7.5 highEPSS 5.7%

UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service (DoS). This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 5.7% chance of exploitation in the next 30 days; higher than 93% of CVEs (scores of 2026-10-31)
CWEs: CWE-787, CWE-121
Published: 2019-03-08
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

siemens:sinumerik_access_mymachine\/p2p
siemens:sinumerik_pcu_base_win10_software\/ipc
siemens:sinumerik_pcu_base_win7_software\/ipc
uvnc:ultravnc

References

https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-023-ultravnc-stack-based-buffer-overflow/
https://www.us-cert.gov/ics/advisories/icsa-20-161-06
https://cert-portal.siemens.com/productcert/pdf/ssa-927095.pdf
https://ics-cert.kaspersky.com/advisories/klcert-advisories/2019/03/01/klcert-19-023-ultravnc-stack-based-buffer-overflow/

Check your stack JSON