CVE-2013-10036 HIGH

CVE-2013-10036: Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

Vendor Beetel Teletech Ltd.
Product Connection Manager
Weakness CWE-121
Published July 31, 2025
Last update April 7, 2026
View on NVD All CVEs

CVSS base score

8.4/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

What the vulnerability does

01Description

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.

Key dates

02Disclosure timeline

July 31, 2025 CVE published
April 7, 2026 Record updated