Vulnerability · Published Mar 16, 2020 · Assigned by mitre
CVE-2020-7248
High 7.5
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.5% (higher than 85% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)2.5%top 15.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow.
Affected products (as reported)
References
- https://github.com/openwrt/openwrt/commits/master x_refsource_MISC
- https://openwrt.org/advisory/2020-01-31-2 x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2020-7248#range-4512438 x_refsource_MISC