PT-2002-2634 · Skystream · Skystream Emr5000

CVE-2002-1912 · Publicado 2002-12-31 · Atualizado 2023-12-28

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SkyStream EMR5000 versions 1.16 through 1.18

Description The issue allows remote attackers to cause a denial of service, resulting in a null pointer exception and kernel panic, by sending a large number of packets when the buffers are full. This occurs because the device does not drop packets or disable the Ethernet interface when the buffers are full.

Recommendations For SkyStream EMR5000 versions 1.16 through 1.18, consider implementing traffic control measures to limit the number of incoming packets and prevent buffer overflow. As a temporary workaround, restrict access to the Ethernet interface to minimize the risk of exploitation.

Exploit

Correção

NULL Pointer Dereference

Enumeração de Fraquezas

CWE-476

Identificadores relacionados

CVE-2002-1912

Produtos afetados

Skystream Emr5000

Referências · 6

• 🔥 http://globalintersec.com/adv/skystream-2002021001.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1912 · Nota de Segurança
• http://securityfocus.com/archive/1/295516 · Nota
• http://iss.net/security_center/static/10380.php · Nota
• https://t.me/cvenotify/65425 · Publicação no Telegram
• http://securityfocus.com/bid/5977 · Nota