Unscored CVE-2017-9026 EUVD-2017-17966GHSA-8hp9-f7j3-wxf5

Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attack…

Published May 17, 2017 · Updated Aug 5, 2024 · Assigned by mitre

Description

Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.

References

http://debugtrap.com/2017/05/09/tm06-vulnerabilities/