CVE-2015-2797

Sažetak

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

Reference

http://osvdb.org/show/osvdb/120335
http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/
http://www.securityfocus.com/bid/75355
https://www.exploit-db.com/exploits/36577/
https://www.exploit-db.com/exploits/37170/

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

03-12-2016 - 03:06

Objavljeno

19-06-2015 - 14:59