Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4h6j-2wpq-2xv2

Опубликовано: 21 мая 2024
Источник: github
Github: Не прошло ревью
CVSS3: 10

Описание

Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions.

This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others)

with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.

Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions.

This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others)

with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.

EPSS

Процентиль: 73%
0.00769
Низкий

10 Critical

CVSS3

Дефекты

CWE-121

Связанные уязвимости

CVSS3: 10
nvd
больше 1 года назад

Stack-based Buffer Overflow vulnerability in ZkTeco-based OEM devices allows, in some cases, the execution of arbitrary code. Due to the lack of protection mechanisms such as stack canaries and PIE, it is possible to successfully execute code even under restrictive conditions. This issue affects ZkTeco-based OEM devices (ZkTeco ProFace X, Smartec ST-FR043, Smartec ST-FR041ME and possibly others) with firmware ZAM170-NF-1.8.25-7354-Ver1.0.0 and possibly others.

CVSS3: 10
fstec
больше 1 года назад

Уязвимость микропрограммного обеспечения биометрических терминалов ZkTeco ProFace X, Smartec ST-FR043 и Smartec ST-FR041ME, связанная с переполнением буфера на стеке, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 73%
0.00769
Низкий

10 Critical

CVSS3

Дефекты

CWE-121