Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-25125. PoCs published by cakes.
AI-analyzed exploit summary This exploit demonstrates a Denial of Service (DoS) vulnerability in the Netis ADSL Router DL4322D RTK 2.1.1 by sending an FTP command with a 1461-character offset, causing the router to crash. It requires authentication with default credentials (guest/guest).
Description
Netis ADSL Router DL4322D firmware RTK 2.1.1 contains a buffer overflow vulnerability in the embedded FTP service that allows an authenticated remote user to trigger a denial of service. After logging in to the FTP service, sending an FTP command such as ABOR with an excessively long argument causes the service, and in practice the router, to crash or become unresponsive, resulting in a loss of availability for the device and connected users.
Exploits (1)
This exploit demonstrates a Denial of Service (DoS) vulnerability in the Netis ADSL Router DL4322D RTK 2.1.1 by sending an FTP command with a 1461-character offset, causing the router to crash. It requires authentication with default credentials (guest/guest).
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X