PT-2014-3584 · Zyxel · Zyxel Wireless N300 Netusb Nbg-419N

Publicado 2014-04-15 · Atualizado 2014-04-15 · CVE-2014-0355

Positive Technologies (AI Summary)

CVSS v2.0

7.9

Alta

Vetor base

AV:A/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ZyXEL Wireless N300 NetUSB NBG-419N router version 1.00(BFQ.6)C0

Description The issue allows man-in-the-middle attackers to execute arbitrary code. This can be achieved via a long temp attribute in a yweather:condition element in a forecastrss file processed by the checkWeather function, or through the WeatherCity or WeatherDegree variable to the detectWeather function. Additionally, unspecified input to the UpnpAddRunRLQoS, UpnpDeleteRunRLQoS, or UpnpDeletePortCheckType function, or the SET COUNTRY udps command can also lead to exploitation.

Recommendations For ZyXEL Wireless N300 NetUSB NBG-419N router version 1.00(BFQ.6)C0, consider disabling the checkWeather function, restricting input to the detectWeather function for the WeatherCity and WeatherDegree variables, and limiting access to the UpnpAddRunRLQoS, UpnpDeleteRunRLQoS, UpnpDeletePortCheckType functions, as well as the SET COUNTRY udps command until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-0355

Produtos afetados

Zyxel Wireless N300 Netusb Nbg-419N

Referências · 2

• http://kb.cert.org/vuls/id/939260 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-0355 · Nota de Segurança