CVE-2020-14511CWE-121

Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series…

published July 15, 2020

CVSS
—
EPSS
1%
Percentile
72.2
In the wild
Unconfirmed
What it is

⚠️ A crafty cookie could lead to a stack-based buffer overflow in your EDR-G902 and EDR-G903 routers! This isn't your average cookie — it’s more like a surprise package that might just overload your server! 🍪 Think of it as a delivery driver who ignores weight limits and tries to stuff an overstuffed box into an already-packed delivery van. If the driver isn’t careful, the entire van might tip over, causing chaos! If exploited, an attacker could trigger this buffer overflow, potentially crashing the web server and disrupting network services. Imagine your internet going down at the most inconvenient time — absolutely devastating!

Put simply

Think of it as a delivery driver who ignores weight limits and tries to stuff an overstuffed box into an already-packed delivery van. If the driver isn’t careful, the entire van might tip over, causing chaos! This vulnerability occurs when the web server on the EDR-G902 and EDR-G903 routers mishandles specially crafted cookies, leading to a stack-based buffer overflow that can corrupt memory and allow for unauthorized actions.

What to do

If exploited, an attacker could trigger this buffer overflow, potentially crashing the web server and disrupting network services. Imagine your internet going down at the most inconvenient time — absolutely devastating! To protect your devices, immediately update your router's firmware to version 5.4 or later. Regularly check for updates and ensure your network is secure against unwanted cookie surprises! You've got this! By following these steps, you'll ensure your routers are safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01395 · 72.2th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2020-07-15T12:27Z
EPSS history
Timeline
  • 15 JUL 12:27Z
    Malicious operation of the crafted web browser cookie may cause a stack-based buffer overflow in the system web server on the EDR-G902 and EDR-G903 Series…
    cvelistv5