CVE-2015-2797

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 98%
VendorProductVersion
airtiesair_firmware
𝑥
≤ 1.0.2.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/show/osvdb/120335
http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/
http://www.securityfocus.com/bid/75355
https://www.exploit-db.com/exploits/36577/
https://www.exploit-db.com/exploits/37170/
http://osvdb.org/show/osvdb/120335
http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/
http://www.securityfocus.com/bid/75355
https://www.exploit-db.com/exploits/36577/
https://www.exploit-db.com/exploits/37170/