PT-2023-12998 · Fastweb · Fastweb Fastgate Mediaaccess Fga2130Fwb+1

Francyesc0 · Publicado 2023-05-19 · Atualizado 2025-01-21 · CVE-2022-30114

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Fastweb FASTGate MediaAccess FGA2130FWB version 18.3.n.0482 FW 230 FGA2130 Fastweb FASTGate MediaAccess DGA4131FWB versions up to 18.3.n.0462 FW 261 DGA4131

Description A heap-based buffer overflow in a network service allows a remote attacker to reboot the device through a crafted HTTP request, causing Denial of Service (DoS).

Recommendations For Fastweb FASTGate MediaAccess FGA2130FWB version 18.3.n.0482 FW 230 FGA2130, consider disabling the network service temporarily until a patch is available. For Fastweb FASTGate MediaAccess DGA4131FWB versions up to 18.3.n.0462 FW 261 DGA4131, restrict access to the device through crafted HTTP requests to minimize the risk of exploitation. As a temporary workaround, avoid using the vulnerable network service until the issue is resolved.

Exploit

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2022-30114

Produtos afetados

Fastweb Fastgate Mediaaccess Dga4131Fwb

Fastweb Fastgate Mediaaccess Fga2130Fwb

Referências · 7

• 🔥 https://str0ng4le.github.io/jekyll/update/2023/05/12/fastgate-bof-cve-2022-30114 · Exploit
• https://osv.dev/vulnerability/CVE-2022-30114 · Aviso do Fabricante
• https://fastweb.it/myfastweb/assistenza/guide/FASTGate · Nota
• https://t.me/cvenotify/58355 · Publicação no Telegram
• https://t.me/cvenotify/50810 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2022-30114 · Nota de Segurança
• https://t.me/cibsecurity/64459 · Publicação no Telegram