Fastgate

TL;DR これは、Fastweb の Fastgate モデム/ルーターと Ghidra を使って遊んでいる際に発見した脆弱性 CVE-2019-12489 の簡単な報告書です。 この脆弱性により、HTTP リクエストを介してコマンドインジェクションが実行可能となり、SSH シェルを有効化するために使用できます。 ファームウェアの収集と展開 すべてのファームウェアファイルは http://59.0.121.191:8080/ACS-server/file/FILENAME にあります。 FILENAME は以下に等しい: 0.00.89FW200Askey...

CVE-2022-30114

Fastweb FastGate 'cmproxy' 缓冲区溢出 CVE-2022-30114 はじめに このスクリプトは、CVE-2022-30114 の概念実証（PoC）であり、Fastweb FastGate ホームルーター（GPON版およびVDSL2版）の再起動を引き起こします。 CVE-2022-30114 は、TCPポート8888で待ち受けるLighttpd FastCGI Webサーバーを介してHTTPリクエストを処理するプログラムである 'cmproxy' 実行ファイルにおける ヒープベースの...

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

EUVD-2019-8378

Malware in sbrugna...

EUVD-2018-17786

Malware in sbrugna...

VulnCheck KEV: CVE-2018-20122

The web interface on FASTGate Fastweb devices with firmware through 0.00.47FW200Askey 2017-05-17 software through 1.0.1b exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

Heap overflow

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

CVE-2022-30114

CVE-2022-30114 is a heap-based buffer overflow affecting Fastweb FASTGate MediaAccess FGA2130FWB (firmware 18.3.n.0482_FW_230_FW) and DGA4131FWB (up to 18.3.n.0462_FW_261_DGA4131). The vulnerability resides in the cmproxy component that handles HTTP requests on TCP port 8888, caused by lack of va...

PT-2023-12998 · Fastweb · Fastweb Fastgate Mediaaccess Dga4131Fwb +1

Name of the Vulnerable Software and Affected Versions: Fastweb FASTGate MediaAccess FGA2130FWB version 18.3.n.0482 FW 230 FGA2130 Fastweb FASTGate MediaAccess DGA4131FWB versions up to 18.3.n.0462 FW 261 DGA4131 Description: A heap-based buffer overflow in a network service allows a remote attack...

Fastweb FASTGate 缓冲区错误漏洞

Fastweb FASTGate is a modem from Fastweb Italy. A security vulnerability exists in the Fastweb FASTGate MediaAccess FGA2130FWB 18.3.n.0482FW230FGA2130 firmware version and the DGA4131FWB 18.3.n.0462FW261DGA4131 and previous firmware versions, which stems from a security flaw that allows a remote...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

CVE-2022-30114: Out-of-bounds Write

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

Exploit for Out-of-bounds Write in Fastweb Fastgate_Vdsl2_Dga4131Fwb_Firmware

Fastweb FastGate 'cmproxy' buffer overflow CVE-2022-30114...

Fastweb FASTGate Cross-Site Request Forgery Vulnerability (CNVD-2020-67310)

Fastweb FASTGate is a modem from Fastweb Italy. A cross-site request forgery vulnerability exists in Fastweb FASTGate GPON FGA2130FWB version 2020-05-26 and prior versions that allows CSRF to manage web panels through the router, which could be exploited by an attacker to be able to perform...

CVE-2020-13620

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration...

CVE-2020-13620

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration...

Cross site request forgery (csrf)

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration...

CVE-2020-13620

CVE-2020-13620 describes a cross-site request forgery (CSRF) vulnerability in Fastweb FASTGate GPON FGA2130FWB devices up to 2020-05-26, allowing an attacker to perform administrative actions by abusing the router’s web panel. Affected component is the router administration web interface; root ca...