CVE-2020-14473

Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1

published June 24, 2020

CVSS
—
EPSS
2%
Percentile
83.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack-based buffer overflow lurks in Vigor3900, Vigor2960, and Vigor300B, affecting firmware versions before 1.5.1.1! Think of it as overstuffing a suitcase — if you cram in too many clothes, the zipper (or your system) could burst open, spilling everything out all over the place! If exploited, this vulnerability could allow malicious users to overflow the stack, potentially taking down your device or executing harmful code. While we don't have reports of it being actively exploited, the implications of such a breach can still be quite severe!

Put simply

Think of it as overstuffing a suitcase — if you cram in too many clothes, the zipper (or your system) could burst open, spilling everything out all over the place! This vulnerability occurs when the system fails to properly manage memory allocation, leading to a stack overflow that may allow attackers to manipulate the execution flow of the device.

What to do

If exploited, this vulnerability could allow malicious users to overflow the stack, potentially taking down your device or executing harmful code. While we don't have reports of it being actively exploited, the implications of such a breach can still be quite severe! To protect yourself, upgrade the firmware to version 1.5.1.1 or later, and regularly check for updates. It's also a good practice to review your device configurations to ensure they're secure. You can tackle this! Stay proactive with firmware updates, and you'll keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02302 · 83.2th percentile
Published
2020-06-24T16:41Z
EPSS history
Timeline
  • 24 JUN 16:41Z
    Stack-based buffer overflow vulnerability in Vigor3900, Vigor2960, and Vigor300B with firmware before 1.5.1.1
    cvelistv5