CVE-2015-2797

EPSS 77.6%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 77.6%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

31 Mar 2015Metasploit module available

31 Mar 2015Public PoC

19 Jun 2015Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

Affected products

n/a · n/a

public PoCs found — 5

githubgithub.com/Bariskizilkaya/CVE-2015-2797-PoC★ 0 cve_referencewww.exploit-db.com/exploits/36577/unverified cve_referencewww.exploit-db.com/exploits/37170/unverified exploitdbwww.exploit-db.com/exploits/37170unverified exploitdbwww.exploit-db.com/exploits/36577unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/show/osvdb/120335 https://www.exploit-db.com/exploits/36577/https://www.exploit-db.com/exploits/37170/http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/http://www.securityfocus.com/bid/75355