Описание
There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack.
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:zte:mc801a_firmware:mc801a_elisa3_b19:*:*:*:*:*:*:*
cpe:2.3:h:zte:mc801a:-:*:*:*:*:*:*:*
Конфигурация 2
Одновременно
cpe:2.3:o:zte:mc801a1_firmware:mc801a1_elisa1_b04:*:*:*:*:*:*:*
cpe:2.3:h:zte:mc801a1:-:*:*:*:*:*:*:*
EPSS
Процентиль: 45%
0.00224
Низкий
5.9 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-120
CWE-120
Связанные уязвимости
CVSS3: 5.9
github
около 2 лет назад
There is a buffer overflow vulnerability in some ZTE mobile internet producsts. Due to insufficient validation of tcp port parameter, an authenticated attacker could use the vulnerability to perform a denial of service attack.
EPSS
Процентиль: 45%
0.00224
Низкий
5.9 Medium
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-120
CWE-120