VYPR

CWE-121

Stack-based Buffer Overflow

VariantDraftLikelihood: High

Description

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Hierarchy (View 1000)

Children

none

CVEs mapped to this weakness (3,626)

page 22 of 182
  • CVE-2023-4744CriSep 4, 2023
    risk 0.64cvss 9.8epss 0.02

    A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerability is the function formSetDeviceName. The manipulation leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been…

  • CVE-2023-33308CriJul 26, 2023
    risk 0.64cvss 9.8epss 0.02

    A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0 through 7.2.2 allows a remote unauthenticated attacker to execute arbitrary code or command via crafted…

  • CVE-2023-23902CriJul 6, 2023
    risk 0.64cvss 9.8epss 0.02

    A buffer overflow vulnerability exists in the uhttpd login functionality of Milesight UR32L v32.3.0.5. A specially crafted network request can lead to remote code execution. An attacker can send a network request to trigger this vulnerability.

  • CVE-2023-0856CriMay 11, 2023
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C…

  • CVE-2023-0855CriMay 11, 2023
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C…

  • CVE-2023-0853CriMay 11, 2023
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera LBP660C…

  • CVE-2023-0852CriMay 11, 2023
    risk 0.64cvss 9.8epss 0.01

    Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to trigger the affected product being unresponsive or to execute arbitrary code. *:Satera…

  • CVE-2022-2825CriMar 29, 2023
    risk 0.64cvss 9.8epss 0.03

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Kepware KEPServerEX 6.11.718.0. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of text encoding conversions. The issue…

  • CVE-2022-24673CriMar 28, 2023
    risk 0.64cvss 9.8epss 0.03

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Canon imageCLASS MF644Cdw 10.02 printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the SLP protocol. The…

  • CVE-2022-33279CriFeb 12, 2023
    risk 0.64cvss 9.8epss 0.00

    Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length.

  • CVE-2023-24348CriFeb 10, 2023
    risk 0.64cvss 9.8epss 0.01

    D-Link N300 WI-FI Router DIR-605L v2.13B01 was discovered to contain a stack overflow via the curTime parameter at /goform/formSetACLFilter.

  • CVE-2022-43764CriFeb 8, 2023
    risk 0.64cvss 9.8epss 0.01

    Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.

  • CVE-2017-16336CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16335CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16334CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16333CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16332CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16331CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16330CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…

  • CVE-2017-16329CriJan 11, 2023
    risk 0.64cvss 9.9epss 0.01

    Multiple exploitable buffer overflow vulnerabilities exist in the PubNub message handler for the "cc" channel of Insteon Hub running firmware version 1012. Specially crafted commands sent through the PubNub service can cause a stack-based buffer overflow overwriting arbitrary…