CVE-2022-30114

A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

2.42% chance of exploitation in the next 30 days, 83th percentile

Published

2023-05-19

Updated

2025-01-21

Proof-of-concept exploits (2)

• https://str0ng4le.github.io/jekyll/update/2023/05/12/fastgate-bof-cve-2022-30114/
• str0ng4le/CVE-2022-301140★ · 2023-05-12

References

• CVE Record
• NVD entry

Related

• CVE-2022-30111
• CVE-2022-30129
• CVE-2022-30105
• CVE-2022-30136
• CVE-2022-3008
• CVE-2022-3016