CVE-2024-41285 - A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path

Back Back to CVE browser

CRITICAL

A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path

Published Aug 26, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 1.06%

Description

A stack overflow in FAST FW300R v1.3.13 Build 141023 Rel.61347n allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted file path.

Affected products

Vendor Fastcom Product Fw300r Default
n/a
- Version
  1.3.13
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Fastcom

Fw300r

n/a

Version	Status	Constraints
1.3.13	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-787

Out-of-bounds Write

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38996
Advisory
https://gist.github.com/Giles-one/834b2becd7abebc3cabea0484301d149
Third Party Advisory
https://github.com/Giles-one/FW300RouterCrack/
Exploit
https://www.fastcom.com.cn/product-8.html
Product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-38996		Advisory
https://gist.github.com/Giles-one/834b2becd7abebc3cabea0484301d149		Third Party Advisory
https://github.com/Giles-one/FW300RouterCrack/		Exploit
https://www.fastcom.com.cn/product-8.html		Product