CVE-2023-24294

Zumtobel Netlink CCD Onboard v3.74 - Firmware v3.80 was discovered to contain a buffer overflow via the component NetlinkWeb::Information::SetDeviceIdentification.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:zumtobel:netlink_ccd_firmware:3.80:*:*:*:*:*:*:*
cpe:2.3:h:zumtobel:netlink_ccd:3.74:*:*:*:*:*:*:*

History

05 Dec 2023, 12:56

Type Values Removed Values Added
CWE CWE-120
References () https://yoroi.company/en/research/cve-advisory-partial-disclosure-zumtobel-multiple-vulnerabilities/ - () https://yoroi.company/en/research/cve-advisory-partial-disclosure-zumtobel-multiple-vulnerabilities/ - Mitigation, Third Party Advisory
References () http://zumtobel.com - () http://zumtobel.com - Product
First Time Zumtobel netlink Ccd
Zumtobel
Zumtobel netlink Ccd Firmware
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
CPE cpe:2.3:h:zumtobel:netlink_ccd:3.74:*:*:*:*:*:*:*
cpe:2.3:o:zumtobel:netlink_ccd_firmware:3.80:*:*:*:*:*:*:*

29 Nov 2023, 01:15

Type Values Removed Values Added
New CVE

Information

Published : 2023-11-29 01:15

Updated : 2023-12-10 15:26


NVD link : CVE-2023-24294

Mitre link : CVE-2023-24294

CVE.ORG link : CVE-2023-24294


JSON object : View

Products Affected

zumtobel

  • netlink_ccd
  • netlink_ccd_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')