# CVE-2019-14201: Das U-Boot stack buffer overflow in nfs_lookup_reply

Source: https://junglewise.ai/threats/cve-2019-14201-das-u-boot-stack-buffer-overflow-in-nfs-lookup-reply  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2019-07-31. Updated: 2026-05-12  
License: CC BY 4.0 with a link back

CVE-2019-14201 · Severity: critical · CVSS 9.8 · Published 2019-07-31

A critical vulnerability exists in U-Boot, a widely used bootloader for embedded devices and industrial hardware. The flaw occurs when the system processes network-based file system (NFS) responses, potentially allowing an attacker to take full control of the device during the boot process. This could lead to complete system compromise, data theft, or permanent disruption of industrial operations.

Technologies: [Denx U-Boot](https://junglewise.ai/threats/technologies/u-boot), [Siemens ROX II](https://junglewise.ai/threats/technologies/rox-ii). Vendors: [Denx](https://junglewise.ai/threats/vendors/denx), [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2019-14201 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2019-14201 being exploited in the wild.

**How severe is CVE-2019-14201?** Critical severity, with a CVSS score of 9.8, published 31 July 2019.

**Which products and versions are affected?** Siemens ROX II before 2.17.1.

**Is there a fix for CVE-2019-14201?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2019-14201 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2019-14201?** Check whether you run Denx U-Boot or Siemens ROX II at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A stack-based buffer overflow vulnerability exists in the Das U-Boot bootloader within the nfs_lookup_reply helper function of the nfs_handler. The root cause is an out-of-bounds write (CWE-787) when processing incoming NFS (Network File System) replies. An unauthenticated attacker on the same network can exploit this by sending a malicious NFS response to a device attempting to boot over the network. Successful exploitation can lead to arbitrary code execution with high privileges before the operating system has even started. The vulnerability is addressed in U-Boot versions following 2019.07 and in Siemens Ruggedcom Rox II versions 2.17.1 and later.

## Affected products

- Das U-Boot U-Boot through 2019.07
- Siemens Ruggedcom Rox II family before 2.17.1

## Timeline

- 2019-07-31: disclosed: Initial NVD publication
- 2026-05-12: advisory: Siemens published advisory SSA-577017 covering affected Ruggedcom products

## References

- [https://blog.semmle.com/uboot-rce-nfs-vulnerability/](https://blog.semmle.com/uboot-rce-nfs-vulnerability/)
- [https://gitlab.com/u-boot/u-boot](https://gitlab.com/u-boot/u-boot)
- [https://cert-portal.siemens.com/productcert/html/ssa-577017.html](https://cert-portal.siemens.com/productcert/html/ssa-577017.html)

## Related threats

- [Denx U-Boot integer overflow in ext4fs_get_bgdtable](https://junglewise.ai/threats/cve-2025-70293-denx-u-boot-integer-overflow-in-ext4fs-get-bgdtable)
- [Denx U-Boot integer overflow in ZFS filesystem support](https://junglewise.ai/threats/cve-2025-70290-denx-u-boot-integer-overflow-in-zfs-filesystem-support)
- [Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and…](https://junglewise.ai/threats/cve-2025-24857-improper-access-control-for-volatile-memory-containing-boot-code)
- [GNOME libxml2 stack overflow in XPath evaluation](https://junglewise.ai/threats/cve-2025-9714-gnome-libxml2-stack-overflow-in-xpath-evaluation)
- [Das U-Boot integer overflows in memory allocator](https://junglewise.ai/threats/cve-2024-57258-das-u-boot-integer-overflows-in-memory-allocator)