PT-2024-29347 · Unknown · Fast Fw300R

Giles-One · Published 2024-08-26 · Updated 2024-08-30 · CVE-2024-41285

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FAST FW300R version 1.3.13 Build 141023 Rel.61347n

Description A stack overflow in FAST FW300R allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path.

Recommendations For version 1.3.13 Build 141023 Rel.61347n, upgrade to version 1.3.14 or later to remediate the issue. As a temporary workaround, consider restricting access to the vulnerable component until a patch is available.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-120

Related Identifiers

CVE-2024-41285

Affected Products

Fast Fw300R

References · 15

• 🔥 https://github.com/Giles-one/FW300RouterCrack · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-41285 · Security Note
• https://osv.dev/vulnerability/CVE-2024-41285 · Vendor Advisory
• https://twitter.com/transilienceai/status/1829585209274126635 · Twitter Post
• https://twitter.com/cracbot/status/1829761121328513403 · Twitter Post
• https://twitter.com/CVEnew/status/1828105125480591415 · Twitter Post
• https://t.me/cvedetector/4185 · Telegram Post
• https://twitter.com/transilienceai/status/1829198887921307824 · Twitter Post
• https://twitter.com/transilienceai/status/1829585202642862247 · Twitter Post
• https://fastcom.com.cn/product-8.html · Note
• https://twitter.com/transilienceai/status/1829198881361416550 · Twitter Post
• https://twitter.com/transilienceai/status/1829198874763771905 · Twitter Post
• https://twitter.com/cracbot/status/1829398735320678909 · Twitter Post
• https://gist.github.com/Giles-one/834b2becd7abebc3cabea0484301d149 · Note
• https://twitter.com/transilienceai/status/1829585197114769848 · Twitter Post