CyberRota Analysis
AI-GeneratedThe vulnerability affects the Domoticz home automation software, specifically in the MochadTCP::MatchLine() handler, where it improperly handles incoming MOCHAD_RFSEC messages by copying data into a fixed-size stack buffer without proper length validation. This flaw allows an attacker on the local network to exploit a buffer overflow, potentially leading to stack corruption and arbitrary code execution. Organizations utilizing Domoticz in their home automation systems should prioritize patching this vulnerability to mitigate the risk of local network attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Domoticz's MochadTCP::MatchLine handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte m_mochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy with no length check, across three separate code branches (DS10A/KR10A/MS10A device types).