CyberRota Analysis
AI-GeneratedThe vulnerability affects the Netis NC63 firmware, which contains a stack-based buffer overflow that allows unauthenticated remote attackers to execute arbitrary code with root privileges. By exploiting the oversized destHost parameter in the ipFilterList=mod action of netis.cgi, attackers can manipulate stack memory, leading to severe security breaches. Organizations using this firmware should prioritize patching to mitigate the risk of remote code execution.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Netis NC63 firmware through V3.0.0.3327 contains a stack-based buffer overflow vulnerability that allows unauthenticated remote attackers to overwrite saved stack state by supplying an oversized destHost parameter to the ipFilterList=mod action in netis.cgi. Attackers can exploit widthless sscanf conversions that copy user-supplied input into fixed-size stack buffers before authentication is verified, achieving remote code execution as root due to the Boa web server executing the CGI environment with root privileges.