CVE Catalog
CVE-2017-9026
CriticalSummary
Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.
Risk Assessment
An attacker can remotely take control of the application, potentially leading to the execution of malicious code and system compromise.
Recommendation
It is recommended to update the firmware to the latest version to mitigate this vulnerability and to monitor the system for unauthorized activities.
Original NVD description (English source)
Stack buffer overflow in vshttpd (aka ioos) in HooToo Trip Mate 6 (TM6) firmware 2.000.030 and earlier allows remote unauthenticated attackers to control the program counter via a specially crafted fname parameter of a GET request.