Copeland XWEB Pro Stack-Based Buffer Overflow Vulnerability Allowing Unauthenticated Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in an API route of Copeland XWEB Pro, in versions through 1.12.1. This vulnerability allows unauthenticated attackers to corrupt the stack and terminate the program.

Impact

Exploitation of this vulnerability leads to stack corruption and program termination.

Remediation

Users are advised to update XWEB Pro to the latest version. Instructions for updating are available on the Copeland System Software Updates page. Alternatively, XWEB Pro can be updated directly from Copeland servers via the system update menu.