| 标题 | sgwbox N3 NAS V2.0.25 Buffer Overflow |
|---|
| 描述 | An unauthorized buffer overflow vulnerability exists in the sgwbox NAS N3. This vulnerability stems from the lack of length validation and limitation on fields passed to the WIRELESSCFGGET command interface. An unauthenticated remote attacker could exploit this vulnerability to cause the service crash on the remote target NAS device, enabling a remote denial-of-service attack. |
|---|
| 来源 | ⚠️ https://www.notion.so/sgwbox-NAS-N3-Buffer-Overflow-2be6cf4e528a80258b82dee0d6d1ebd1?source=copy_link |
|---|
| 用户 | rgyue (UID 92984) |
|---|
| 提交 | 2025-12-05 06時28分 (8 月前) |
|---|
| 管理 | 2025-12-14 20時01分 (10 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 336426 [Shiguangwu sgwbox N3 2.0.25 WIRELESSCFGGET Interface http_eshell_server params 内存损坏] |
|---|
| 积分 | 16 |
|---|