PT-2015-1357 · Airties · Airties Air 5442+11

Batuhan Burakcin

·

Published

2015-06-19

·

Updated

2016-12-03

·

CVE-2015-2797

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems version 1.0.2.0 and earlier
Description The issue is caused by a stack-based buffer overflow in the firmware of the affected devices, allowing remote attackers to execute arbitrary code via a long string in the redirect parameter to "cgi-bin/login". This can be exploited by sending an incorrect parameter to the subcomponent of "cgi-bin/login", enabling a remote attacker to execute arbitrary code.
Recommendations For AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems version 1.0.2.0 and earlier, consider disabling access to the "cgi-bin/login" endpoint until a patch is available. Avoid using the redirect parameter in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2015-10445
CVE-2015-2797

Affected Products

Airties Air 5021
Airties Air 5341
Airties Air 5342
Airties Air 5343
Airties Air 5442
Airties Air 5443
Airties 5444Tt
Airties Air 5453
Airties Air 5650
Airties Air 5750
Airties Air 5760
Airties Air 6372