PT-2014-4673

CVE-2014-2389

·

Published

2014-04-12

·

Updated

2017-01-20

Description by

CVSS 2.0
9.3
High
MetricsAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions qconnDoor version 10.1.0.2312
Description A stack-based buffer overflow issue exists in the decryption function of qconnDoor. This allows remote attackers to execute arbitrary code via a crafted packet in a TCP session on a wireless network, but only when developer-mode has been previously enabled on the device.
Recommendations For version 10.1.0.2312, consider disabling the decryption function in qconnDoor until a patch is available to prevent potential exploitation.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
Related identifiers
CVE-2014-2389
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com