Buffer overflow in Netis Systems Co., Ltd. Dl4322d

CVE-2018-25125

Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP…

Vulnerability class: Buffer Overflow

EPSS: 0.004 (34.1th percentile) — read the EPSS interpretation.

Affected products

Netis Systems Co., Ltd. Dl4322d — versions 0

Weakness classification (CWE)

CWE-120 — Buffer Copy without Checking Size of Input (Classic Buffer Overflow)

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)