CyberRota Analysis
AI-GeneratedThe Netcore NR255-V version 1.5.130703 is vulnerable to a stack-based buffer overflow in the ntools_tcpdump_start_set.cgi due to an unsized sprintf call, allowing attackers to exploit this flaw by submitting specially crafted input. Successful exploitation could lead to arbitrary code execution, posing a significant risk to system integrity. Organizations using this product should prioritize patching to mitigate potential attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Netcore NR255-V version 1.5.130703 contains a stack-based buffer overflow in ntools_tcpdump_start_set.cgi caused by an unsized sprintf call when processing form values. An attacker can submit crafted input to this cgi endpoint to overflow the stack buffer and potentially execute arbitrary code.