CVE-2022-40987

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-40987

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-40987

CVE-2022-40987 affects Siretta QUARTZ-GOLD, specifically the DetranCLI command parsing stack-based buffer overflow in the G5.0.1.5-210720-141020 firmware. The issue stems from unsafe buffer handling in the command template for (ddns1|ddns2) username WORD password CODE, where a stack overflow can ...