Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5qcg-f6q9-5q2r

Опубликовано: 15 дек. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.1

Описание

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

EPSS

Процентиль: 75%
0.00857
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 9.1
nvd
около 2 лет назад

During the retrofit validation process, the firmware doesn't properly check the boundaries while copying some attributes to check. This allows a stack-based buffer overflow that could lead to a potential Remote Code Execution on the targeted device

EPSS

Процентиль: 75%
0.00857
Низкий

9.1 Critical

CVSS3

Дефекты

CWE-121
CWE-787