PT-2022-16813 · Winaprs · Winaprs

Published 2022-05-31 · Updated 2024-08-03 · CVE-2022-24701

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WinAPRS version 2.9.0

Description An issue was discovered in the processing of national.txt, which allows a local attacker to cause a denial of service or possibly achieve code execution through a buffer overflow. This issue only affects products that are no longer supported by the maintainer.

Recommendations For WinAPRS version 2.9.0, as the product is no longer supported by the maintainer, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-24701

Affected Products

Winaprs

References · 6

• 🔥 https://coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1 · Exploit
• https://osv.dev/vulnerability/CVE-2022-24701 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-24701 · Security Note
• https://t.me/cvenotify/88698 · Telegram Post
• https://t.me/cvenotify/31446 · Telegram Post
• https://winaprs.com · Note