CVE-2024-41285

A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted…

Critical · published August 26, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
64.2
In the wild
Unconfirmed
What it is

🚨 A cleverly crafted file path can turn your FAST FW300R into a playground for attackers, executing arbitrary code or causing a Denial of Service — and that’s no party! 🔥 Think of it like a delivery driver who misreads an address and drops off a premium package at the wrong house — only in this case, that house can end up hosting some very unwelcome guests! 📦 An attacker can potentially seize control of your device, executing any code they want or bringing your system to its knees with a Denial of Service attack. This could lead to catastrophic data breaches or total service disruption, leaving you and your users in a lurch. 😱

Put simply

Think of it like a delivery driver who misreads an address and drops off a premium package at the wrong house — only in this case, that house can end up hosting some very unwelcome guests! 📦 This stack overflow vulnerability in FAST FW300R v1.3.13 allows for execution of arbitrary code when the device processes a malicious file path, compromising its integrity and availability.

What to do

An attacker can potentially seize control of your device, executing any code they want or bringing your system to its knees with a Denial of Service attack. This could lead to catastrophic data breaches or total service disruption, leaving you and your users in a lurch. 😱 Immediately patch to version 1.3.14 or later to close this critical vulnerability. Review your firewall configuration and consider implementing stricter input validation to prevent such vulnerabilities from being exploited in the future. 🛡️ You've got this! With a quick update, you can secure your system and keep those attackers at bay! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01057 · 64.2th percentile
Published
2024-08-26T00:00Z
EPSS history
Timeline
  • 26 AUG 00:00Z
    A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted…
    cvelistv5