CVE-2023-28504

CVE-2023-28504: Stack buffer overflow in UniRPC library function

Vendor Rocket Software

Product UniData

Weakness CWE-120

Published March 29, 2023

Last update February 18, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Rocket Software UniData versions prior to 8.2.4 build 3003 and UniVerse versions prior to 11.3.5 build 1001 or 12.2.1 build 2002 suffer from a stack-based buffer overflow that can lead to remote code execution as the root user.

Key dates

02Disclosure timeline

March 29, 2023 CVE published

February 18, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-28504 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/120.html

Related vulnerabilities

04Related CVE

CVE-2024-8573 TOTOLINK AC1200 T8/AC1200 T10 cstecgi.cgi setParentalRules buffer overflow CVE-2025-5156 H3C GR-5400AX aspForm EditWlanMacList buffer overflow CVE-2022-20891 Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers Remote Command Execution and Denial of Service Vulnerabilities CVE-2025-13548 D-Link DIR-822K/DWR-M920 formFirewallAdv buffer overflow CVE-2022-32140 CODESYS runtime system prone to denial of service due to buffer copy

Identifiers

CVE CVE-2023-28504

CWE CWE-120

Affected versions

Vendor Rocket Software

Product UniData

Affected < 8.2.43.3003

Vendor Rocket Software

Product UniVerse

Affected < 11.3.5.1001

Vendor Rocket Software

Product UniVerse

Affected < 12.2.1.2002