CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability exists in the `cmd_ipaddr_conflict` function of the Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS, and L-PAD products up to version 8.4.16, which can be exploited by an attacker in the superadmin group. This flaw allows for the potential elevation of privileges or a SUID-root process abort by providing an excessively long interface-name argument. Organizations using these affected products should prioritize addressing this vulnerability to mitigate risks associated with unauthorized access and privilege escalation.
Original NVD Description
Stack-based Buffer Overflow (CWE-121) in `/usr/bin/ltsudo` `cmd_ipaddr_conflict` in Loytec LIP-ME201C, L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a `superadmin`-group attacker to trigger a SUID-root process abort or potentially elevate privileges via an overly long interface-name argument.