Описание
A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Ссылки
- Vendor Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Одновременно
Одно из
EPSS
7.2 High
CVSS3
8.8 High
CVSS3
Дефекты
Связанные уязвимости
A stack-based buffer overflow vulnerability exists in the JSON Parsing getblockschedule() functionality of Netgear RAX30 1.0.11.96 and 1.0.7.78. A specially crafted HTTP request can lead to code execution. An attacker can make an authenticated HTTP request to trigger this vulnerability.
Уязвимость функции getblockschedule() синтаксического анализа JSON микропрограммного обеспечения маршрутизаторов NETGEAR RAX28, RAX29, RAX30, позволяющая нарушителю выполнить произвольный код
EPSS
7.2 High
CVSS3
8.8 High
CVSS3