PT-2015-7102
CVE-2015-5993
·
تاريخ النشر
2015-09-21
·
تاريخ التحديث
2015-09-21
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN
Kasda KW58293 devices
Description
The issue is related to a buffer overflow in the form2ping.cgi file, which can be exploited by remote attackers to cause a denial of service, resulting in a device outage. This is achieved by sending a long
ipaddr parameter.Recommendations
For PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN, avoid using the
ipaddr parameter in the form2ping.cgi file until the issue is resolved.
For Kasda KW58293 devices, restrict access to the form2ping.cgi file to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾