CVE-2007-4915
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 68.2%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password stored in memory via a long username in an HTTP Basic Authentication request.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 68.17% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- boa/boa webserver
- Source
- cve@mitre.org
References
- http://securityreason.com/securityalert/3151
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.ikkisoft.com/stuff/SN-2007-02.txt
- http://www.securenetwork.it/ricerca/advisory/download/SN-2007-02.txt
- http://www.securityfocus.com/archive/1/479434/100/0/threaded
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
- http://www.securityfocus.com/bid/25676
- https://www.exploit-db.com/exploits/4542
- http://securityreason.com/securityalert/3151
- http://www.gnucitizen.org/projects/router-hacking-challenge/
- http://www.ikkisoft.com/stuff/SN-2007-02.txt
- http://www.securenetwork.it/ricerca/advisory/download/SN-2007-02.txt
- http://www.securityfocus.com/archive/1/479434/100/0/threaded
- http://www.securityfocus.com/archive/1/489009/100/0/threaded
- http://www.securityfocus.com/bid/25676
- https://www.exploit-db.com/exploits/4542
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.