Lucene search

MitreCVE-2024-41285

HistoryAug 26, 2024 - 4:15 p.m.

CVE-2024-41285

2024-08-2616:15:08

CWE-787

CWE-120

mitre

web.nvd.nist.gov

fast fw300r

stack overflow

arbitrary code

denial of service

crafted file path

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

28.0%

JSON

A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path.

Affected configurations

Nvd

Node

fastcomfw300r_firmwareMatch1.3.13_build_141023_rel.61347n

AND

fastcomfw300rMatch-

VendorProductVersionCPE
fastcomfw300r_firmware1.3.13_build_141023_rel.61347ncpe:2.3:o:fastcom:fw300r_firmware:1.3.13_build_141023_rel.61347n:*:*:*:*:*:*:*
fastcomfw300r-cpe:2.3:h:fastcom:fw300r:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fastcom	fw300r_firmware	1.3.13_build_141023_rel.61347n	cpe:2.3:o:fastcom:fw300r_firmware:1.3.13_build_141023_rel.61347n:::::::*
fastcom	fw300r	-	cpe:2.3:h:fastcom:fw300r:-:::::::*

References

gist.github.com/Giles-one/834b2becd7abebc3cabea0484301d149

github.com/Giles-one/FW300RouterCrack/

www.fastcom.com.cn/product-8.html

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

28.0%

JSON

Related for CVE-2024-41285