Vulnerability Description
A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA4131, allows a remote attacker to reboot the device through a crafted HTTP request, causing DoS.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fastweb | Fastgate Vdsl2 Dga4131Fwb Firmware | < 18.3.n.0482_fw_264_dga4131 |
| Fastweb | Fastgate Vdsl2 Dga4131Fwb | - |
| Fastweb | Fastgate Gpon Fga2130Fwb Firmware | < 18.3.n.0482_fw_233_fga2130 |
| Fastweb | Fastgate Gpon Fga2130Fwb | - |
Related Weaknesses (CWE)
References
- https://str0ng4le.github.io/jekyll/update/2023/05/12/fastgate-bof-cve-2022-30114ExploitTechnical DescriptionThird Party Advisory
- https://www.fastweb.it/myfastweb/assistenza/guide/FASTGate/
- https://str0ng4le.github.io/jekyll/update/2023/05/12/fastgate-bof-cve-2022-30114ExploitTechnical DescriptionThird Party Advisory
- https://www.fastweb.it/myfastweb/assistenza/guide/FASTGate/
FAQ
What is CVE-2022-30114?
CVE-2022-30114 is a vulnerability with a CVSS score of 7.5 (HIGH). A heap-based buffer overflow in a network service in Fastweb FASTGate MediaAccess FGA2130FWB, firmware version 18.3.n.0482_FW_230_FGA2130, and DGA4131FWB, firmware version up to 18.3.n.0462_FW_261_DGA...
How severe is CVE-2022-30114?
CVE-2022-30114 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-30114?
Check the references section above for vendor advisories and patch information. Affected products include: Fastweb Fastgate Vdsl2 Dga4131Fwb Firmware, Fastweb Fastgate Vdsl2 Dga4131Fwb, Fastweb Fastgate Gpon Fga2130Fwb Firmware, Fastweb Fastgate Gpon Fga2130Fwb.