Описание
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body.
Ссылки
- ExploitThird Party Advisory
- Release NotesVendor Advisory
- ProductVendor Advisory
- ExploitThird Party Advisory
- Release NotesVendor Advisory
- ProductVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.5.1.1 (включая)
Одновременно
cpe:2.3:o:digi:passport_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:digi:passport:-:*:*:*:*:*:*:*
EPSS
Процентиль: 71%
0.00659
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 7.5
github
почти 4 года назад
Digi Passport Firmware through 1.5.1,1 is affected by a buffer overflow. An attacker can supply a string in the page parameter for reboot.asp endpoint, allowing him to force an overflow when the string is concatenated to the HTML body.
EPSS
Процентиль: 71%
0.00659
Низкий
7.5 High
CVSS3
5 Medium
CVSS2
Дефекты
CWE-787