A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker to trigger a memory corruption in the context of the binary. This may result in a Denial-of-Service (DoS) condition, possibly in the execution of arbitrary code with the same privileges of the process (root), or have other unspecified impacts on the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
oryginał ENCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HAilux Imx6
APPAilux< 1.0.7-2
Powiązane podatności
A CWE-1269 “Product Released in Non-Release Configuration” vulnerability in the Django web framework used by t...
A CWE-798 “Use of Hard-coded Credentials” vulnerability in the MariaDB database of the web application allows ...
A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser...
A CWE-425 “Direct Request ('Forced Browsing')” vulnerability in the “file_configuration” functionality of the ...
A CWE-434 “Unrestricted Upload of File with Dangerous Type” vulnerability in the “file_configuration” function...