by Kastro CVE-2024-45415
zte zxhn_z500_firmware — The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function.
Description · from the CVE record
The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in check_data_integrity function. This function is responsible for validating the checksum of data in post request. The checksum is sent encrypted in the request, the function decrypts it and stores the checksum on the stack without validating it. An unauthenticated attacker can get RCE as root by exploiting this vulnerability.
Affected
ProductAffectedFixed inSource
n/an/a–CNA
zxhn_z500_firmwareV1.0.1.1B2.1000–CISA-ADP
zxhn_e500_firmwareV1.0.1.1B2.1000–CISA-ADP
zxhn_h108n_firmwareV2.6.20.ROST12–CISA-ADP
zxhn_e2615_firmwareV1.0.1–CISA-ADP
zxhn_e2603_firmwareV1.0.1–CISA-ADP
zxhn_e2618_firmwareV1.0.0.2B4.3000–CISA-ADP
zxhn_e1600_firmwareV1.0.0.2B1.1000–CISA-ADP
zxhn_h338a_firmwareV1.5.0_H3A.1T9P1-o–CISA-ADP
zxhn_h168n_firmwareV3.5.5_CO.1T1–CISA-ADP
zxhn_h168a_firmwareTTN.1T1_211029–CISA-ADP
Scores by source
CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total