Patch Ticker

Netcore NBR100V2 auto_ac integer overflow allows remote attacks

Netcore network devices can be broken into remotely.

Summary

Netcore NBR100V2 firmware has an integer overflow in the msg_aes_dec function of /usr/bin/auto_ac, which allows remote attacks. Public exploit code exists, and the vendor did not respond to early disclosure.

What to do

Update these devices now.

  • Netcore NBR100V2

Products and platforms

  • Netcore NBR100V2

CVE IDs

Sources

Times

First published

First seen