CVE-2022-26953

Vulnerability

A buffer overflow vulnerability exists in Digi Passport firmware through version 1.5.1,1. The flaw resides in the reboot.asp endpoint, where the page parameter is concatenated into the HTML body without proper bounds checking. An attacker can supply an overly long string in this parameter to force a buffer overflow.

Exploitation

An attacker with network access to the device can send a crafted HTTP request to the reboot.asp endpoint with an excessively long page parameter. No authentication or user interaction is required. The overflow occurs when the server concatenates the attacker-supplied string into the response body.

Impact

Successful exploitation results in a buffer overflow, leading to memory corruption. This could allow an attacker to cause a denial of service or potentially execute arbitrary code with the privileges of the web server process.

Mitigation

No fix is available as the Digi Passport product line is end-of-life and obsolete, with no further support [1]. Users are advised to migrate to a supported product as recommended by Digi.