Lucene search

K
cve[email protected]CVE-2015-2797
HistoryJun 19, 2015 - 2:59 p.m.

CVE-2015-2797

2015-06-1914:59:00
CWE-119
web.nvd.nist.gov
22
cve-2015-2797
stack-based buffer overflow
airties
dsl modems
firmware vulnerability
remote code execution

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.814 High

EPSS

Percentile

98.4%

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

Affected configurations

NVD
Node
airtiesair_firmwareRange1.0.2.0
AND
airtiesair_5021Match-
OR
airtiesair_5341Match-
OR
airtiesair_5342Match-
OR
airtiesair_5343Match-
OR
airtiesair_5442Match-
OR
airtiesair_5443Match-
OR
airtiesair_5444ttMatch-
OR
airtiesair_5453Match-
OR
airtiesair_5650ttMatch-
OR
airtiesair_5750Match-
OR
airtiesair_5760Match-
OR
airtiesair_6372Match-

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

8.4 High

AI Score

Confidence

Low

0.814 High

EPSS

Percentile

98.4%

Related for CVE-2015-2797