Vulnerabilities > Hootoo > Trip Mate 6 Firmware

DATE CVE VULNERABILITY TITLE RISK
2017-05-17 CVE-2017-9026 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hootoo Trip Mate 6 Firmware
Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.
network
low complexity
hootoo CWE-119
7.5
2017-05-17 CVE-2017-9025 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Hootoo Trip Mate 6 Firmware
Heap buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted HTTP Cookie header.
network
low complexity
hootoo CWE-119
6.4