Threats tagged 'ghsa-cc77-h5q9-vmwg'

Cudy TR3000 devices running firmware versions before 2.5.42 have a vulnerability in the dnsmasq configuration that allows authenticated administrators to inject malicious directives. This is achieved by embedding a newline character in the net.set_dhcp leasetime field, enabling attackers to append or insert lines in the dnsmasq configuration file. Such manipulation can alter DNS responses for LAN clients or disrupt the dnsmasq service entirely.