CVE-2013-10036

A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.

CVSS v4.0

8.4 HIGHCVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2025-07-31

Updated

2026-07-15

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/28969

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/beetel_netcon…

References

• CVE Record
• NVD entry

Related

• CVE-2013-10035
• CVE-2013-10037
• CVE-2013-10034
• CVE-2013-10038
• CVE-2013-10033
• CVE-2013-10039