Russian Vulnerability Scanner Database

Back to List

CVE-2015-3036

Scores

EPSS

0.753medium75.3%
0%20%40%60%80%100%

Percentile: 75.3%

CVSS

10.0critical2.0
0246810

CVSS Score: 10.0/10

All CVSS Scores

CVSS 2.0
10.0

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005.

Scaner-VS 7 — a modern vulnerability management solution

Uses this database for vulnerability detection. High-speed search, cross-platform, advanced configuration audit, and flexible filtering. Suitable for organizations of any size.
Learn more about Scaner-VS 7

Sources

nvd

CWEs

CWE-119

Related Vulnerabilities

BDU:2015-10387

Exploits

Exploit ID: 38454

Source: exploitdb

URL: https://www.exploit-db.com/exploits/38454

Exploit ID: 38566

Source: exploitdb

URL: https://www.exploit-db.com/exploits/38566

Recommendations

Source: nvd

Update the firmwareRefer to the Vendor Information section below and contact your vendor for firmware update information.Affected users may also consider the following workarounds:Disable device sharingConsult your device’s vendor and documentation as some devices may allow disabling the USB device sharing service on your network.Block port 20005Blocking port 20005 on the local network may help mitigate this attack by preventing access to the service.

URL: http://www.kb.cert.org/vuls/id/177092

Vulnerable Software (1)

Type: Configuration

Vendor: kcodes

Product: netusb

Operating System: * * *

Trait: 
{  "cpe_match": [    {      "cpe23uri": "cpe:2.3:a:kcodes:netusb:-:*:*:*:*:linux:*:*",      "vulnerable": true    }  ],  "operator": "OR"}

Source: nvd