Threats tagged 'ghsa-w32x-fxxg-m4fc'

Netcore NR256CN devices up to version 1.5.140116 have a NULL pointer dereference vulnerability in the Boa web server's user_auth() function. This flaw allows unauthenticated attackers to crash the server by sending a malformed Basic Authorization header lacking a colon, such as one decoding to a single character. Exploiting this vulnerability results in denial of access to the device's management interface by killing the main Boa process.