Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j4j9-gr8r-6qx2

Опубликовано: 09 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.

EPSS

Процентиль: 50%
0.0027
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 лет назад

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.

EPSS

Процентиль: 50%
0.0027
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-121
CWE-787