high7.5
CVE-2022-30114
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firm…
Impact
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fastweb | Fastgate Vdsl2 Dga4131fwb Firmware | before 18.3.n.0482_fw_264_dga4131 |
| Fastweb | Fastgate Gpon Fga2130fwb Firmware | before 18.3.n.0482_fw_233_fga2130 |
Weakness classification
References
- NVD record
- CVE.org record
- https://str0ng4le.github.io/jekyll/update/2023/05/12/fastgate-bof-cve-2022-30114/
- https://www.fastweb.it/myfastweb/assistenza/guide/FASTGate/
- https://str0ng4le.github.io/jekyll/update/2023/05/12/fastgate-bof-cve-2022-30114/
- https://www.fastweb.it/myfastweb/assistenza/guide/FASTGate/