CVE-2015-2797

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and…

published June 19, 2015

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
78%
Percentile
99.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky buffer overflow in AirTies DSL modems invites disaster! With just a long string in a redirect parameter, an attacker could execute arbitrary code—an open door to chaos! 🔥 Think of it like a delivery driver who ignores weight limits and packs their truck with an oversized load. If the cargo shifts just the right way, it could cause a major crash (or in this case, a system compromise). An attacker could exploit this vulnerability to run any code they wish on the affected modem, potentially gaining control over the device. This could allow them to manipulate network traffic or even launch attacks on other devices connected to the network—absolutely devastating!

Put simply

Think of it like a delivery driver who ignores weight limits and packs their truck with an oversized load. If the cargo shifts just the right way, it could cause a major crash (or in this case, a system compromise). This stack-based buffer overflow occurs in the login process of AirTies DSL modems, where a long string in the redirect parameter leads to arbitrary code execution. If the modem firmware is outdated, it becomes a playground for malicious actors!

What to do

An attacker could exploit this vulnerability to run any code they wish on the affected modem, potentially gaining control over the device. This could allow them to manipulate network traffic or even launch attacks on other devices connected to the network—absolutely devastating! To protect yourself, update the firmware on the affected AirTies models to the latest version. Additionally, review your security settings and consider changing any default passwords to strengthen your defenses. Don't leave the door wide open! You've got this! By taking these steps, you'll be one step closer to securing your network! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.77710 · 99.6th percentile
Published
2015-06-19T14:00Z
EPSS history
Timeline
  • 19 JUN 14:00Z
    Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and…
    cvelistv5