CVE-2023-24133 : Jensen of Scandinavia Eagle 1200AC V15.03.06.33

Jensen of Scandinavia Eagle 1200AC V15.03.06.33_en was discovered to contain a stack overflow via the wepkey_5g parameter at /goform/WifiBasicSet.

Published 2023-03-01 20:15:18

Updated 2023-03-04 03:59:39

Source MITRE

View at NVD, CVE.org

Vulnerability category: Memory Corruption

Products affected by CVE-2023-24133

Heimgardtechnologies » Eagle 1200ac Firmware » Version: 15.03.06.33
cpe:2.3:o:heimgardtechnologies:eagle_1200ac_firmware:15.03.06.33:*:*:*:*:*:*:*
Matching versions
When used together with: Heimgardtechnologies » Eagle 1200ac » Version: N/A

EPSS FAQ

0.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 48 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
6.5	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	2.8	3.6	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

Assigned by: nvd@nist.gov (Primary)

http://eagle.com

Eagle > Personal Loans Made Easy with Affordable Monthly Payments
Not Applicable

CVEs referencing this url
http://jensen.com

Jensen
Not Applicable

CVEs referencing this url
https://oxnan.com/posts/WifiBasic_wepkey_5g_DoS

[CVE-2023-24133] DoS via wepkey_5g parameter in Eagle 1200ac
Exploit;Third Party Advisory

Jump to