CVE-2022-30114

Fastweb FastGate 'cmproxy' buffer overflow CVE-2022-30114 Introduction This script is a Proof of Concept PoC of CVE-2022-30114 and causes a reboot of Fastweb FastGate home routers, both GPON and VDSL2 version. CVE-2022-30114 is a heap-based buffer overflow in the 'cmproxy' executable, a program...

Fastgate

TLDR This is a brief report of a vulnerability CVE-2019-12489 discovered playing around with a Fastgate modem/router of Fastweb and Ghidra. The vulnerability allow the execution of a command injection through an http request and can be used to enable an SSH shell. Firmware collection and extracti...

CVE-2019-18661

Fastweb FASTGate 1.0.1b devices allow partial authentication bypass by changing a certain checkpwd return value from 0 to 1. An attack does not achieve administrative control of a device; however, the attacker can view all of the web pages of the administration console...

EUVD-2019-8378

Malware in sbrugna...

EUVD-2018-17786

Malware in sbrugna...

VulnCheck KEV: CVE-2018-20122

The web interface on FASTGate Fastweb devices with firmware through 0.00.47FW200Askey 2017-05-17 software through 1.0.1b exposed a CGI binary that is vulnerable to a command injection vulnerability that can be exploited to achieve remote code execution with root privileges. No authentication is...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

Heap overflow

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

CVE-2022-30114

CVE-2022-30114 is a heap-based buffer overflow affecting Fastweb FASTGate MediaAccess FGA2130FWB (firmware 18.3.n.0482_FW_230_FW) and DGA4131FWB (up to 18.3.n.0462_FW_261_DGA4131). The vulnerability resides in the cmproxy component that handles HTTP requests on TCP port 8888, caused by lack of va...

CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

Fastweb FASTGate buffer error vulnerability

Fastweb FASTGate is a modem from Fastweb Italy. A security vulnerability exists in the Fastweb FASTGate MediaAccess FGA2130FWB 18.3.n.0482FW230FGA2130 firmware version and the DGA4131FWB 18.3.n.0462FW261DGA4131 and previous firmware versions, which stems from a security flaw that allows a remote...

PT-2023-12998 · Fastweb · Fastweb Fastgate Mediaaccess Dga4131Fwb +1

Name of the Vulnerable Software and Affected Versions: Fastweb FASTGate MediaAccess FGA2130FWB version 18.3.n.0482 FW 230 FGA2130 Fastweb FASTGate MediaAccess DGA4131FWB versions up to 18.3.n.0462 FW 261 DGA4131 Description: A heap-based buffer overflow in a network service allows a remote attack...

CVE-2022-30114: Out-of-bounds Write

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482FW230FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462FW261DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS...

Exploit for Out-of-bounds Write in Fastweb Fastgate_Vdsl2_Dga4131Fwb_Firmware

Fastweb FastGate 'cmproxy' buffer overflow CVE-2022-30114...

Fastweb FASTGate Cross-Site Request Forgery Vulnerability (CNVD-2020-67310)

Fastweb FASTGate is a modem from Fastweb Italy. A cross-site request forgery vulnerability exists in Fastweb FASTGate GPON FGA2130FWB version 2020-05-26 and prior versions that allows CSRF to manage web panels through the router, which could be exploited by an attacker to be able to perform...

CVE-2020-13620

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration...

CVE-2020-13620

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration...

Cross site request forgery (csrf)

Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration...

CVE-2020-13620

CVE-2020-13620 describes a cross-site request forgery (CSRF) vulnerability in Fastweb FASTGate GPON FGA2130FWB devices up to 2020-05-26, allowing an attacker to perform administrative actions by abusing the router’s web panel. Affected component is the router administration web interface; root ca...