Global infos:

A vulnerability was discovered in KM08-708H-v1.1, There is a buffer overflow in the sub_445BDC() function within the /usr/sbin/goahead program; The strcpy function is executed without checking the length of the string, leading to a buffer overflow.

CVE Status: Awaiting Analysis

References:

[email protected]

[email protected]

Metrics:

Attribute	Value
Attack Complexity	LOW
Attack Vector	ADJACENT_NETWORK
Availability Impact	HIGH
Base Score	6.5
Base Severity	MEDIUM
Confidentiality Impact	NONE
Integrity Impact	NONE
Privileges Required	NONE
Scope	UNCHANGED
User Interaction	NONE
Vector String	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability Score	2.8
Impact Score	3.6
Source	134c704f-9b21-4f2e-91b3-4a467353bcc0
Type	Secondary

Links:

Exploit-db
Github