CVE-2015-2797

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 78%

from disclosure to weapon0 days

Published on NVDJun 19

1st PoCMar 31

metasploitMar 31

exploitation probability

78%top 1% of all CVEs

observed exploitation

nono source reports it

5 public exploit(s)

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

Affected products

n/a · n/a

public PoCs found — 5✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/37170 exploitdbwww.exploit-db.com/exploits/36577unverified githubgithub.com/Bariskizilkaya/CVE-2015-2797-PoC★ 0 cve_referencewww.exploit-db.com/exploits/36577/unverified cve_referencewww.exploit-db.com/exploits/37170/unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/show/osvdb/120335 https://www.exploit-db.com/exploits/36577/https://www.exploit-db.com/exploits/37170/http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/http://www.securityfocus.com/bid/75355