CyberRota Analysis
AI-GeneratedA stack-based buffer overflow vulnerability in the cmd_edl function of OreSat Firmware v1.0 allows an attacker with physical access to the UART3 serial interface to exploit the system by sending a malicious command with an oversized filename parameter. This could lead to arbitrary code execution or system instability. Organizations using this firmware should prioritize addressing this vulnerability to mitigate potential risks associated with unauthorized access and control.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A stack-based buffer overflow vulnerability exists in the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggered when processing the edl fw_flash command, where the <filename> argument is copied to a 64-byte stack buffer via memcpy without proper length validation. An attacker with physical access to the UART3 serial interface can exploit this vulnerability by sending a maliciously crafted command with an oversized filename parameter,