8.8 HIGH
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): High (H)
- Integrity (I): High (H)
- Availability (A): High (H)
- Exploit Code Maturity (E): Proof-of-Concept (P)
- Remediation Level (RL): Not Defined (X)
- Report Confidence (RC): Reasonable (R)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): High (H)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): High (H)
- Modified Availability (MA): High (H)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed (not in Nixpkgs)
Tenda M3 Destination setAdvPolicyData buffer overflow
A flaw has been found in Tenda M3 1.0.0.10. This vulnerability affects the function setAdvPolicyData of the file /goform/setAdvPolicyData of the component Destination Handler. Executing a manipulation of the argument policyType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.
References
-
-
-
Submit #782999 | Tenda Tenda M3 Access Controller(M3) V1.0.0.10 Buffer Overflow third-party-advisory
-
-
https://www.tenda.com.cn/ product
Affected products
- ==1.0.0.10
Matching in nixpkgs
pkgs.flam3
Cosmic recursive fractal flames
-
nixos-unstable 3.1.1+date=2018-04-12
- nixpkgs-unstable 3.1.1+date=2018-04-12
- nixos-unstable-small 3.1.1+date=2018-04-12
pkgs.fvwm3
Multiple large virtual desktop window manager - Version 3
pkgs.wasm3
Fastest WebAssembly interpreter, and the most universal runtime
pkgs.dhewm3
Doom 3 port to SDL
pkgs.grails
Full stack, web application framework for the JVM
pkgs.icbm3d
3D vector-based clone of the atari game Missile Command
pkgs.m32edit
Editor for the Midas M32 digital mixer
pkgs.m33-linux
Linux program that can communicate with the Micro 3D printer
-
nixos-unstable 0-unstable-2016-06-23
- nixpkgs-unstable 0-unstable-2016-06-23
- nixos-unstable-small 0-unstable-2016-06-23
pkgs.stm32flash
Open source flash program for the STM32 ARM processors using the ST bootloader
pkgs.n-m3u8dl-re
Cross-Platform, modern and powerful stream downloader for MPD/M3U8/ISM
-
nixos-unstable 0.5.1-beta
- nixpkgs-unstable 0.5.1-beta
- nixos-unstable-small 0.5.1-beta
pkgs.stm32cubemx
Graphical tool for configuring STM32 microcontrollers and microprocessors
pkgs.stm32loader
Flash firmware to STM32 microcontrollers in Python
pkgs.ubootCM3588NAS
Boot loader for embedded systems
pkgs.python312Packages.m3u8
None
pkgs.python313Packages.m3u8
Python m3u8 parser
pkgs.python314Packages.m3u8
Python m3u8 parser
pkgs.tests.fetchpatch.simple
None
pkgs.tests.fetchpatch2.simple
None
pkgs.python312Packages.pycomm3
None
pkgs.python313Packages.pycomm3
Python Ethernet/IP library for communicating with Allen-Bradley PLCs
pkgs.python314Packages.pycomm3
Python Ethernet/IP library for communicating with Allen-Bradley PLCs
pkgs.haskellPackages.data-stm32
ARM SVD and CubeMX XML parser and pretty printer for STM32 family
pkgs.python312Packages.distorm3
None
pkgs.python313Packages.distorm3
Disassembler library for x86/AMD64
pkgs.python314Packages.distorm3
Disassembler library for x86/AMD64
pkgs.python312Packages.pymystem3
None
pkgs.python313Packages.pymystem3
Python wrapper for the Yandex MyStem 3.1 morpholocial analyzer of the Russian language
pkgs.python314Packages.pymystem3
Python wrapper for the Yandex MyStem 3.1 morpholocial analyzer of the Russian language
pkgs.python312Packages.quantulum3
None
pkgs.python313Packages.quantulum3
Library for unit extraction - fork of quantulum for python3
pkgs.python314Packages.quantulum3
Library for unit extraction - fork of quantulum for python3
pkgs.python312Packages.stm32loader
None
pkgs.python313Packages.stm32loader
Flash firmware to STM32 microcontrollers in Python
pkgs.python314Packages.stm32loader
Flash firmware to STM32 microcontrollers in Python
pkgs.haskellPackages.STM32F103xx-SVD
Definition for Peripherals,Registers and Fields from STM32F103xx.svd
pkgs.python312Packages.pym3u8downloader
None
pkgs.python313Packages.pym3u8downloader
Python class to download and concatenate video files from M3U8 playlists
pkgs.python314Packages.pym3u8downloader
Python class to download and concatenate video files from M3U8 playlists
pkgs.tests.prefer-remote-fetch.fetchgit
None
-
nixos-unstable 4sp62sm354z1
- nixpkgs-unstable 4sp62sm354z1
- nixos-unstable-small 4sp62sm354z1
pkgs.tests.fetchpatch.fileWithApostrophe
None
pkgs.tests.fetchFromGitHub.submodule-deep
None
pkgs.tests.fetchpatch2.fileWithApostrophe
None
pkgs.tests.fetchNextcloudApp.simple-sha512
None
pkgs.tests.fetchurl.flag-appending-curlOpts
None
Package maintainers
-
@bjornfor Bjørn Forsman <bjorn.forsman@gmail.com>
-
@magnetophon Bart Brouns <bart@magnetophon.nl>
-
@phanirithvij Phani Rithvij <phanirithvij2000@gmail.com>
-
@fabaff Fabian Affolter <mail@fabian-affolter.ch>
-
@ShamrockLee Yueh-Shun Li <shamrocklee@posteo.net>
-
@happysalada Raphael Megzari <raphael@megzari.com>
-
@wucke13 Wucke <wucke13@gmail.com>
-
@angaz Angus Dippenaar
-
@lopsided98 Ben Wolsieffer <benwolsieffer@gmail.com>
-
@malbarbo Marco A L Barbosa <malbarbo@gmail.com>