CVE-2015-5993

Name of the Vulnerable Software and Affected Versions PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN Kasda KW58293 devices

Description The issue is related to a buffer overflow in the form2ping.cgi file, which can be exploited by remote attackers to cause a denial of service, resulting in a device outage. This is achieved by sending a long ipaddr parameter.

Recommendations For PLDT SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN, avoid using the ipaddr parameter in the form2ping.cgi file until the issue is resolved. For Kasda KW58293 devices, restrict access to the form2ping.cgi file to minimize the risk of exploitation.