9 matches found
cve-2022-27255
CVE-2022-27255 - Переполнение буфера SIP ALG в Realtek eCos SDK Этот репозиторий содержит материалы доклада "Исследование скрытой поверхности атак OEM IoT-устройств: взлом тысяч маршрутизаторов через уязвимость в SDK Realtek для ОС eCos", который был представлен на DEFCON30. Содержимое этого...
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
Realtek eCos Stack Buffer Overflow (CVE-2022-27255)
A stack-based buffer overflow exists in Realtek eCos. Successful exploitation could lead to arbitrary code execution...
Exploit for Improper Input Validation in Realtek Ecos_Rsdk_Firmware
CVE-2022-27255-checker Simple checker for CVE-2022...
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
CVE-2022-27255
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...
PT-2022-4237
Name of the Vulnerable Software and Affected Versions Realtek eCos RSDK version 1.5.7p1 Realtek MSDK version 4.9.4p1 Description The SIP ALG function in Realtek eCos RSDK and MSDK has a stack-based buffer overflow that allows an attacker to remotely execute code without authentication via a craft...
CVE-2022-27255: Improper Input Validation
In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data...