PT-2018-2858 · Гранит · Гранит-Навигатор-6.18
Publicado
2018-12-20
·
Atualizado
2018-12-20
CVSS v2.0
4.7
Média
| Vetor | AV:L/AC:H/Au:N/C:P/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Гранит-Навигатор-6.18
Description
The issue is related to the use of uncontrolled format strings in the device's embedded software. An attacker can exploit this to cause a denial of service by sending a specially crafted command, such as
can rcv can teseo 2%n%n%n%n%n%n%n, when connected to the device using a UART converter, which involves putting the device into terminal mode cli.Recommendations
For Гранит-Навигатор-6.18, consider restricting access to the UART interface to minimize the risk of exploitation until a patch is available. Avoid using specially crafted commands that could trigger the denial of service.
Correção
Use of Externally-Controlled Format String
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Гранит-Навигатор-6.18