CVE-2015-2797

Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

77.84% chance of exploitation in the next 30 days, 100th percentile

Published

2015-06-19

Updated

2024-08-06

Proof-of-concept exploits (1)

• Bariskizilkaya/CVE-2015-2797-PoC0★ · 2025-04-27

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/airties_login_cgi_bof…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/37170
• https://www.exploit-db.com/exploits/36577

References

• CVE Record
• NVD entry

Related

• CVE-2022-20186
• CVE-2022-38181
• CVE-2015-2794
• CVE-2015-2798
• CVE-2015-2793
• CVE-2015-2803