CVE-2015-3036
KCodes NetUSB - Stack-Based Buffer Overflow via Long Computer Name
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-3036. PoCs published by Adrián Ruiz Bermudo, blasty.
AI-analyzed exploit summary This exploit targets a kernel stack buffer overflow in NetUSB (CVE-2015-3036) by sending a maliciously crafted computer name during the handshake process, leading to a denial of service (DoS). It uses AES encryption for communication and verifies vulnerability by checking if the target device crashes.
Description
Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR products, TP-LINK products, and other products, allows remote attackers to execute arbitrary code by providing a long computer name in a session on TCP port 20005.
Exploits (2)
This exploit targets a kernel stack buffer overflow in NetUSB (CVE-2015-3036) by sending a maliciously crafted computer name during the handshake process, leading to a denial of service (DoS). It uses AES encryption for communication and verifies vulnerability by checking if the target device crashes.
This is a weaponized exploit for CVE-2015-3036, a NetUSB kernel vulnerability, which achieves remote code execution on a specific target device (WNDR3700v5) by leveraging a stack-based buffer overflow, ROP chain, and AES-encrypted payloads.