CVE-2013-10036

Beetel Connection Manager NetConfig.ini Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.

Affected

Beetel Teletech Ltd. · Connection Manager

CVSS v4.0 VULNCHECK

8.4 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

0.52% chance of exploitation in the next 30 days, 43rd percentile

Published

2025-07-31

Updated

2026-07-15

Proof-of-concept exploits (2)

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/win…
• https://www.exploit-db.com/exploits/28969

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/beetel_netcon…

References

• CVE Record
• NVD entry