CyberRota Analysis
AI-GeneratedThe vulnerability affects the Netcore NR255-V version 1.5.130703, allowing attackers to exploit an out-of-bounds read condition during the pre-flash validation process, which can be triggered by uploading a truncated firmware image. This could lead to unauthorized access to sensitive data or system crashes. Organizations using this specific version of the Netcore NR255-V should prioritize patching to mitigate potential exploitation risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability in the mtd_write pre-flash validation routine triggered by short firmware uploads. Attackers can upload a truncated firmware image via put_file_cgi.c to trigger out-of-bounds reads across main.c, check_image_uuid.c, and oemMD5Update.c.