Submit #323832: Shanghai Sunfull Automation Co., LTD. HMI1002-ARM Firmware Revision: 2.0.4 Buffer Overflowinfo

TitleShanghai Sunfull Automation Co., LTD. HMI1002-ARM Firmware Revision: 2.0.4 Buffer Overflow
DescriptionThe vulnerability arises when the device processes a malformed message, leading to a buffer overflow. This issue is specifically triggered by improper handling of data within the device, causing memory to overflow into adjacent areas designated for protocol data unit handling. As a result, the device generates a response with an erroneous APDU that includes data reflective of the overflowed buffer content. This malfunction indicates a critical flaw in the device’s memory management that could potentially be exploited to alter device operations or extract sensitive information.
Source⚠️ https://github.com/isZzzz/HMI1002-ARM-Gateway-Document/blob/main/HMI1002-ARM%20apply.pdf
UserisZzzzz (ID 64489)
Submission2024-04-28 06:08 (22 days ago)
Moderation2024-05-05 09:06 (7 days later)
StatusPrzyjęty
VulDB Entry263115

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!