CVE-2022-2025

🗓️ 23 Sep 2022 15:06:54Reported by INCIBEType

cve🔗 web.nvd.nist.gov📰️ 9 Media mentions👁 36 Views

an attacker with knowledge of user/pass of Grandstream GSD3710 in its 1.0.11.13 version, could overflow the stack since it doesn't check the param length before use the strcopy instruction. The explotation of this vulnerability may lead an attacker to execute a shell with full access

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2022-2025	23 Sep 202220:43	–	circl
CNNVD	Grandstream GSD3710 缓冲区错误漏洞	23 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-2025 Grandstream GSD3710 Stack-based Buffer Overflow	23 Sep 202215:06	–	cvelist
Exploit DB	Grandstream GSD3710 1.0.11.13 - Stack Overflow	5 Jun 202500:00	–	exploitdb
EUVD	EUVD-2022-34329	23 Sep 202215:06	–	euvd
NVD	CVE-2022-2025	23 Sep 202216:15	–	nvd
OSV	CVE-2022-2025	23 Sep 202216:15	–	osv
Prion	Design/Logic Flaw	23 Sep 202216:15	–	prion
Positive Technologies	PT-2022-14472 · Grandstream · Grandstream Gsd3710	23 Sep 202200:00	–	ptsecurity

NVD

Vulners

Node

grandstream gds3710_firmwareMatch1.0.11.13

AND

grandstream gds3710Match-

[
  {
    "product": "Grandstream GSD3710",
    "vendor": "Grandstream",
    "versions": [
      {
        "status": "affected",
        "version": "1.0.11.13"
      }
    ]
  }
]