CVE-2014-0355 in Wireless N300 NetUSB
要約 (英語)
Multiple stack-based buffer overflows on the ZyXEL Wireless N300 NetUSB NBG-419N router with firmware 1.00(BFQ.6)C0 allow man-in-the-middle attackers to execute arbitrary code via (1) a long temp attribute in a yweather:condition element in a forecastrss file that is processed by the checkWeather function; the (2) WeatherCity or (3) WeatherDegree variable to the detectWeather function; unspecified input to the (4) UpnpAddRunRLQoS, (5) UpnpDeleteRunRLQoS, or (6) UpnpDeletePortCheckType function; or (7) the SET COUNTRY udps command.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
予約する
2013年12月05日
公開
2014年04月15日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 13012 | ZyXEL Wireless N300 NetUSB XML forecastrss.xml checkWeather メモリ破損 | 119 | 未実証 | Unavailable | CVE-2014-0355 |