The digest generation function of NHIServiSignAdapter has not been verified for parameter’s length, which leads to a stack overflow loophole. Remote attackers can use the leak to execute code without privilege.
References
Link | Resource |
---|---|
https://www.twcert.org.tw/tw/cp-132-4272-23ba4-1.html | Third Party Advisory |
Configurations
Information
Published : 2020-12-31 00:15
Updated : 2021-02-03 05:36
NVD link : CVE-2020-25844
Mitre link : CVE-2020-25844
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
panorama
- nhiservisignadapter