WinAPRS 安全漏洞

WinAPRS is a multifaceted system for packet radios in Hams that allows monitoring of real-time geographic information such as vehicle location, weather status, radio direction finding, and more. It involves maps, GPS tracking, packet radios and more. A security vulnerability exists in WinAPRS...

CVE-2022-24700

WinAPRS 2.9.0 is affected by a buffer overflow in the DIGI address processing of VHF KISS AX.25 packets, which could allow a remote attacker to cause a denial of service (daemon crash). The issue is caused by improper handling in the DIGI address processing path. Remediation: there is no publicly...

CVE-2022-24700

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in DIGI address processing for VHF KISS packets allows a remote attacker to cause a denial of service daemon crash via a malicious AX.25 packet over the air. NOTE: This vulnerability only affects products that are no longer supported by...

CVE-2022-24702

CVE-2022-24702 affects WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component can allow remote code execution via malicious AX.25 packets over the air. All sources note the vulnerability impacts products no longer supported by the maintainer. Connected documents do not provide a patched v...

CVE-2022-24702

An issue was discovered in WinAPRS 2.9.0. A buffer overflow in the VHF KISS TNC component allows a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2022-16814 · Winaprs · Winaprs

Name of the Vulnerable Software and Affected Versions: WinAPRS version 2.9.0 Description: An issue was discovered in the VHF KISS TNC component, allowing a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. This issue only affects products that are no longe...

DEF CON 28: Introduction to ACARS

This post is a companion to the DEF CON 28 video available here What is ACARS? ACARS Aircraft Communications Addressing and Reporting System, pronounced ‘ay-cars’ which is an avionics system used to for sending text messages between ground and airborne stations. This is a light touch on the topic...

CVE-2014-2940

Cobham Sailor 900 and 6000 satellite terminals with firmware 1.08 MFHF and 2.11 VHF have hardcoded credentials for the administrator account, which allows attackers to obtain administrative control by leveraging physical access or terminal access...