Publish Advisories

GHSA-f8q2-j8xf-7xhh GHSA-rqgg-vgvc-434g
2026-05-22 18:04:22 -07:00 · 2024-04-27 21:31:54 +00:00
parent d2269c2a88
commit 6438c9d78b
2 changed files with 104 additions and 0 deletions
@@ -0,0 +1,50 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f8q2-j8xf-7xhh",
+  "modified": "2024-04-27T21:30:30Z",
+  "published": "2024-04-27T21:30:30Z",
+  "aliases": [
+    "CVE-2024-4291"
+  ],
+  "details": "A vulnerability was found in Tenda A301 15.13.08.12_multi_TDE01. It has been rated as critical. This issue affects the function formAddMacfilterRule of the file /goform/setBlackRule. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-262223. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4291"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/L1ziang/Vulnerability/blob/main/formAddMacfilterRule.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.262223"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.262223"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.320672"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-121"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-27T20:15:07Z"
+  }
+}
@@ -0,0 +1,54 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rqgg-vgvc-434g",
+  "modified": "2024-04-27T21:30:30Z",
+  "published": "2024-04-27T21:30:30Z",
+  "aliases": [
+    "CVE-2024-4292"
+  ],
+  "details": "A vulnerability classified as critical has been found in Contemporary Controls BASrouter BACnet BASRT-B 2.7.2. Affected is an unknown function of the component Device-Communication-Control Service. The manipulation with the input 55ff0500370015f30104025506110afb7519035d0841e4bece257b6acfc71f leads to denial of service. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262224. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [
+
+  ],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-4292"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASER-B_backdoor.pcapng"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/isZzzz/BASRT-B_BACnet_Router_Document/blob/main/BASRT_CVE_apply.pdf"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.262224"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.262224"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.320749"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-404"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2024-04-27T21:15:47Z"
+  }
+}