CVE-2022-41017CWE-120

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020

High · published January 26, 2023

CVSS v3.0
7.2
EPSS
2%
Percentile
78.8
In the wild
Unconfirmed
What it is

⚡ The DetranCLI command parsing in Siretta QUARTZ-GOLD is a slippery slope, with multiple stack-based buffer overflows just waiting for a crafty network packet! Think of this vulnerability like a clumsy waiter in a busy restaurant; if they mismanage too many orders at once, they can drop a whole tray of dishes, causing chaos in the kitchen! An attacker could exploit this vulnerability to execute arbitrary commands on the device, putting your entire network at risk. This means they could potentially disrupt operations, manipulate configurations, or even launch further attacks!

Put simply

Think of this vulnerability like a clumsy waiter in a busy restaurant; if they mismanage too many orders at once, they can drop a whole tray of dishes, causing chaos in the kitchen! This vulnerability arises in the command parsing function for the DetranCLI, where a specially crafted packet can overflow the stack, leading to unsafe execution of commands.

What to do

An attacker could exploit this vulnerability to execute arbitrary commands on the device, putting your entire network at risk. This means they could potentially disrupt operations, manipulate configurations, or even launch further attacks! To fix this, upgrade your Siretta QUARTZ-GOLD to version 5.0.1.6 or later immediately. Additionally, review your network security settings to monitor and filter unexpected packets effectively. You've got this! Take action now to protect your network and maintain security hero status! 🛡️

The record
Technical detail
CVSS v3.0
7.2 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01837 · 78.8th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-01-26T21:24Z
EPSS history
Timeline
  • 26 JAN 21:24Z
    Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020
    cvelistv5