PT-2025-15042 · Unknown · Qinguoyi Tinywebserver
S0L42
·
Publicado
2025-04-04
·
Atualizado
2025-04-07
·
CVE-2025-3266
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
qinguoyi TinyWebServer version 1.0
Description
A critical issue has been found in the software, affecting some unknown functionality of the file /http/http conn.cpp. The manipulation of the
name and password arguments leads to a stack-based buffer overflow. This issue can be exploited remotely.Recommendations
For qinguoyi TinyWebServer version 1.0, as a temporary workaround, consider restricting access to the /http/http conn.cpp file until a patch is available. Avoid using the
name and password arguments in the affected functionality to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Correção
Stack Overflow
Memory Corruption
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Qinguoyi Tinywebserver