Threats tagged 'ghsa-c384-mhv7-jvfr'

A critical stack-based buffer overflow vulnerability exists in the get_csrf_whites function of the /cgi/advanced/misc_main.cgi file in EFM ipTIME NAS1dual version 1.5.24. This vulnerability can be exploited remotely without authentication. Public exploit code has been disclosed, and the vendor has not responded to the disclosure. The flaw allows an attacker to achieve full confidentiality, integrity, and availability impact on the affected device.