CVE-2020-13109

Опубликовано: 16 мая 2020

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Morita Shogi 64 through 2020-05-02 for Nintendo 64 devices allows remote attackers to execute arbitrary code via crafted packet data to the built-in modem because 0x800b3e94 (aka the IF subcommand to top-level command 7) has a stack-based buffer overflow.

Ссылки

https://cturt.github.io/shogihax.html
Exploit
Third Party Advisory
https://github.com/CTurt/shogihax
Third Party Advisory
https://cturt.github.io/shogihax.html
Exploit
Third Party Advisory
https://github.com/CTurt/shogihax
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:seta:morita_shogi_64:*:*:*:*:*:*:*:*

Версия до 2020-05-02 (включая)

cpe:2.3:h:nintendo:nintendo_64:-:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.02723

Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-p4x2-xpx5-wf7r

github

больше 3 лет назад

EPSS

Процентиль: 86%

0.02723

Низкий

9.8 Critical

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787