Critical severity9.8NVD Advisory· Published May 17, 2017· Updated May 13, 2026

CVE-2017-9026

Description

Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.

Affected products

Hootoo/Trip Mate 6 Firmware
cpe:2.3:o:hootoo:trip_mate_6_firmware:*:*:*:*:*:*:*:*
Range: <=2.000.030

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

debugtrap.com/2017/05/09/tm06-vulnerabilities/nvdExploitTechnical DescriptionThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000