CVE-2015-2797

Scores

EPSS

0.770medium77.0%
0%20%40%60%80%100%

Percentile: 77.0%

CVSS

10.0critical2.0
0246810

CVSS Score: 10.0/10

All CVSS Scores

CVSS 2.0
10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-119

Related Vulnerabilities

Exploits

Exploit ID: 36577

Source: exploitdb

URL: https://www.exploit-db.com/exploits/36577

Exploit ID: 37170

Source: exploitdb

URL: https://www.exploit-db.com/exploits/37170

Exploit ID: CVE-2015-2797

Source: github-poc

URL: https://github.com/Bariskizilkaya/CVE-2015-2797-PoC

Vulnerable Software (1)

Type: Configuration

Vendor: *

Product: air_firmware

Operating System: * * *

Trait:
{  "children": [    {      "cpe_match": [        {          "cpe23uri": "cpe:2.3:o:airties:air_firmware:*:*:*:*:*:*:*:*",          "versionEndIncluding": "1.0.2.0",          "vulnerable": true...

Source: nvd

End of list