Vulnerability Details CVE-2017-18046
Buffer overflow on Dasan GPON ONT WiFi Router H640X 12.02-01121 2.77p1-1124 and 3.03p2-1146 devices allows remote attackers to execute arbitrary code via a long POST request to the login_action function in /cgi-bin/login_action.cgi (aka cgipage.cgi).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.111
EPSS Ranking 93.1%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2017-18046
-
cpe:2.3:h:dasannetworks:h640x:-
-
cpe:2.3:o:dasannetworks:h640x_firmware:12.02-01121
-
cpe:2.3:o:dasannetworks:h640x_firmware:2.77p1-1124
-
cpe:2.3:o:dasannetworks:h640x_firmware:3.03p2-1146