PT-2022-16812 · Winaprs · Winaprs

Published 2022-05-31 · Updated 2024-08-03 · CVE-2022-24700

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions WinAPRS version 2.9.0

Description An issue was discovered in the DIGI address processing for VHF KISS packets, allowing a remote attacker to cause a denial of service (daemon crash) via a malicious AX.25 packet over the air. This issue only affects products that are no longer supported by the maintainer.

Recommendations For WinAPRS version 2.9.0, as the product is no longer supported by the maintainer, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-24700

Affected Products

Winaprs

References · 7

• 🔥 https://coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1 · Exploit
• https://osv.dev/vulnerability/CVE-2022-24700 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24700 · Security Note
• https://winaprs.com · Vendor Advisory
• https://t.me/cibsecurity/43669 · Telegram Post
• https://t.me/cvenotify/88697 · Telegram Post
• https://t.me/cvenotify/31447 · Telegram Post