PT-2022-2385 · Ers4900+3 · Ers4900+3

Published 2022-05-03 · Updated 2022-05-04 · CVE-2022-29861

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ERS3500 (affected versions not specified) ERS3600 (affected versions not specified) ERS4900 (affected versions not specified) ERS5900 (affected versions not specified)

Description The issue is related to errors in processing HTTP headers in the firmware of the affected switches. Exploitation of this issue could allow a remote attacker to execute arbitrary code.

Recommendations For ERS3500, update the firmware to a version that fixes the HTTP header processing errors. For ERS3600, update the firmware to a version that fixes the HTTP header processing errors. For ERS4900, update the firmware to a version that fixes the HTTP header processing errors. For ERS5900, update the firmware to a version that fixes the HTTP header processing errors. As a temporary workaround, consider restricting access to the HTTP interface of the switches until a patch is available.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2022-02737

CVE-2022-29861

Affected Products

Ers3500

Ers3600

Ers4900

Ers5900

References · 4

• https://bdu.fstec.ru/vul/2022-02737 · Security Note
• https://t.me/true_secator/2911 · Telegram Post
• https://extremeportal.force.com/ExtrSupportHome · Note
• https://helpnetsecurity.com/2022/05/03/tlstorm-2-0 · Note