CVE-2015-2797

2015-06-1914:59:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.1

Confidence

Low

EPSS

0.814

Percentile

98.4%

JSON

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

Affected configurations

Nvd

Node

airtiesair_firmwareRange≤1.0.2.0

AND

airtiesair_5021Match-

airtiesair_5341Match-

airtiesair_5342Match-

airtiesair_5343Match-

airtiesair_5442Match-

airtiesair_5443Match-

airtiesair_5444ttMatch-

airtiesair_5453Match-

airtiesair_5650ttMatch-

airtiesair_5750Match-

airtiesair_5760Match-

airtiesair_6372Match-

VendorProductVersionCPE
airtiesair_firmware*cpe:2.3:o:airties:air_firmware:*:*:*:*:*:*:*:*
airtiesair_5021-cpe:2.3:h:airties:air_5021:-:*:*:*:*:*:*:*
airtiesair_5341-cpe:2.3:h:airties:air_5341:-:*:*:*:*:*:*:*
airtiesair_5342-cpe:2.3:h:airties:air_5342:-:*:*:*:*:*:*:*
airtiesair_5343-cpe:2.3:h:airties:air_5343:-:*:*:*:*:*:*:*
airtiesair_5442-cpe:2.3:h:airties:air_5442:-:*:*:*:*:*:*:*
airtiesair_5443-cpe:2.3:h:airties:air_5443:-:*:*:*:*:*:*:*
airtiesair_5444tt-cpe:2.3:h:airties:air_5444tt:-:*:*:*:*:*:*:*
airtiesair_5453-cpe:2.3:h:airties:air_5453:-:*:*:*:*:*:*:*
airtiesair_5650tt-cpe:2.3:h:airties:air_5650tt:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
airties	air_firmware	*	cpe:2.3:o:airties:air_firmware::::::::
airties	air_5021	-	cpe:2.3:h:airties:air_5021:-:::::::*
airties	air_5341	-	cpe:2.3:h:airties:air_5341:-:::::::*
airties	air_5342	-	cpe:2.3:h:airties:air_5342:-:::::::*
airties	air_5343	-	cpe:2.3:h:airties:air_5343:-:::::::*
airties	air_5442	-	cpe:2.3:h:airties:air_5442:-:::::::*
airties	air_5443	-	cpe:2.3:h:airties:air_5443:-:::::::*
airties	air_5444tt	-	cpe:2.3:h:airties:air_5444tt:-:::::::*
airties	air_5453	-	cpe:2.3:h:airties:air_5453:-:::::::*
airties	air_5650tt	-	cpe:2.3:h:airties:air_5650tt:-:::::::*