Vulnerability · Published Apr 9, 2021 · Assigned by mitre
CVE-2021-25328
High 8.8
In plain English
A high-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.9% (higher than 90% of all known vulnerabilities).
Severity (CVSS NVD)8.8High
Exploit odds (30 days)3.9%top 9.5% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Skyworth Digital Technology RN510 V.3.1.0.4 RN510 V.3.1.0.4 contains a buffer overflow vulnerability in /cgi-bin/app-staticIP.asp. An authenticated attacker can send a specially crafted request to endpoint which can lead to a denial of service (DoS) or possible code execution on the device.
Affected products (as reported)
References
- https://s3curityb3ast.github.io/KSA-Dev-011.md x_refsource_MISC
- 20210504 KSA-Dev-0010:CVE-2021-25328:Authenticated Stack Overflow in Skyworth RN510 mesh Device mailing-list, x_refsource_FULLDISC
- http://packetstormsecurity.com/files/162450/Shenzhen-Skyworth-RN510-Buffer-Overflow.html x_refsource_MISC