CVE-2021-37748
HIGHGrandstream HT801 Firmware < 1.0.29 - Authenticated Buffer Overflow via manage_if Setting
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2021-37748. PoCs published by SECFORCE.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2021-37748, a remote stack overflow vulnerability in Grandstream HT801 ATA devices. The exploits demonstrate two attack paths (path1 and path2) via SSH and Telnet, leveraging stack-based buffer overflows to achieve remote code execution (RCE) on ARM-based systems.
Description
Multiple buffer overflows in the limited configuration shell (/sbin/gs_config) on Grandstream HT801 devices before 1.0.29 allow remote authenticated users to execute arbitrary code as root via a crafted manage_if setting, thus bypassing the intended restrictions of this shell and taking full control of the device. There are default weak credentials that can be used to authenticate.
Exploits (1)
This repository contains functional exploit code for CVE-2021-37748, a remote stack overflow vulnerability in Grandstream HT801 ATA devices. The exploits demonstrate two attack paths (path1 and path2) via SSH and Telnet, leveraging stack-based buffer overflows to achieve remote code execution (RCE) on ARM-based systems.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H