PT-2022-16814 · Winaprs · Winaprs

Rickostuff · Published 2022-05-31 · Updated 2024-08-03 · CVE-2022-24702

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions WinAPRS version 2.9.0

Description An issue was discovered in the VHF KISS TNC component, allowing a remote attacker to achieve remote code execution via malicious AX.25 packets over the air. This issue only affects products that are no longer supported by the maintainer.

Recommendations For WinAPRS version 2.9.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-24702

Affected Products

Winaprs

References · 9

• 🔥 https://github.com/Coalfire-Research/WinAPRS-Exploits · Exploit
• 🔥 https://coalfire.com/the-coalfire-blog/hacking-ham-radio-winaprs-part1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-24702 · Security Note
• https://osv.dev/vulnerability/CVE-2022-24702 · Vendor Advisory
• https://winaprs.com · Vendor Advisory
• https://t.me/cvenotify/31443 · Telegram Post
• https://t.me/cvenotify/82652 · Telegram Post
• https://news.ycombinator.com/item?id=31571476 · Note
• https://t.me/cvenotify/88699 · Telegram Post