PT-2002-2634 · Skystream · Skystream Emr5000

Published 2002-12-31 · Updated 2023-12-28 · CVE-2002-1912

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions SkyStream EMR5000 versions 1.16 through 1.18

Description The issue allows remote attackers to cause a denial of service, resulting in a null pointer exception and kernel panic, by sending a large number of packets when the buffers are full. This occurs because the device does not drop packets or disable the Ethernet interface when the buffers are full.

Recommendations For SkyStream EMR5000 versions 1.16 through 1.18, consider implementing traffic control measures to limit the number of incoming packets and prevent buffer overflow. As a temporary workaround, restrict access to the Ethernet interface to minimize the risk of exploitation.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2002-1912

Affected Products

Skystream Emr5000

References · 6

• 🔥 http://globalintersec.com/adv/skystream-2002021001.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-1912 · Security Note
• http://securityfocus.com/archive/1/295516 · Note
• http://iss.net/security_center/static/10380.php · Note
• https://t.me/cvenotify/65425 · Telegram Post
• http://securityfocus.com/bid/5977 · Note