Skip to content

CVE-2017-9026 Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fn...

CriticalCVSS 9.8 EPSS 1.6%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.

Affected products

ProductAffected versionsFixed in
hootoo trip mate 6 firmware <= 2.000.030 No fix listed

References

  • debugtrap.com exploit technical-description third-party-advisory