PT-2024-13733 · Edimax · Edimax Br6478Ac

Published 2024-01-16 · Updated 2024-01-30 · CVE-2023-49351

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Edimax BR6478AC V2 firmware version v1.23

Description A stack-based buffer overflow vulnerability in the /bin/webs binary allows attackers to overwrite other values located on the stack due to an incorrect use of the strcpy() function.

Recommendations For Edimax BR6478AC V2 firmware version v1.23, consider disabling the strcpy() function in the /bin/webs binary as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2023-49351

Affected Products

Edimax Br6478Ac

References · 6

• https://osv.dev/vulnerability/CVE-2023-49351 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-49351 · Security Note
• https://twitter.com/VulmonFeeds/status/1747373577123340557 · Twitter Post
• https://twitter.com/CVEnew/status/1747331023350743385 · Twitter Post
• https://github.com/countfatcode/temp/blob/main/formUSBAccount/formUSBAccount.md · Note
• https://t.me/cvenotify/69202 · Telegram Post