CVEvulnerability
CVE-2015-2797
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-06-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.
Affected configurations
• airties air firmware (<= 1.0.2.0)
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/show/osvdb/120335 osvdb.org
- http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/ Exploit
- http://www.securityfocus.com/bid/75355 www.securityfocus.com
- https://www.exploit-db.com/exploits/36577/ Exploit
- https://www.exploit-db.com/exploits/37170/ Exploit
- http://osvdb.org/show/osvdb/120335 osvdb.org
- http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/ Exploit
- http://www.securityfocus.com/bid/75355 www.securityfocus.com
- https://www.exploit-db.com/exploits/36577/ Exploit
- https://www.exploit-db.com/exploits/37170/ Exploit