{"id":"CVE-2015-2797","aliases":["EUVD-2015-2885","GHSA-rjpw-p967-pqvx"],"status":"published","title":"Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442,...","description":"Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.7771,"percentile":0.99569,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2015-06-19T14:00:00Z","modified":"2026-06-17T00:24:46Z","exploits":[{"source":"exploitdb","id":"EDB-36577","title":"Airties Air5650TT - Remote Stack Overflow","type":"remote","platform":"multiple","date":"2015-03-31","url":"https://www.exploit-db.com/exploits/36577"},{"source":"exploitdb","id":"EDB-37170","title":"Airties - login-cgi Buffer Overflow (Metasploit)","type":"remote","platform":"hardware","date":"2015-06-01","verified":true,"url":"https://www.exploit-db.com/exploits/37170"},{"source":"metasploit","id":"exploit/linux/http/airties_login_cgi_bof","title":"Airties login-cgi Buffer Overflow","type":"exploit","platform":"Linux","date":"2015-03-31","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/airties_login_cgi_bof"},{"source":"pocgithub","id":"Bariskizilkaya/CVE-2015-2797-PoC","title":"Bariskizilkaya/CVE-2015-2797-PoC","date":"2025-04-27","url":"https://github.com/Bariskizilkaya/CVE-2015-2797-PoC"}],"products":[{"vendor":"airties","product":"air_firmware"}],"references":[{"url":"http://www.securityfocus.com/bid/75355","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/37170/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"]},{"url":"http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series/","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://www.exploit-db.com/exploits/36577/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"]},{"url":"http://osvdb.org/show/osvdb/120335","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2797"},{"url":"https://www.exploit-db.com/exploits/36577"},{"url":"https://www.exploit-db.com/exploits/37170"},{"url":"http://www.bmicrosystems.com/blog/exploiting-the-airties-air-series"},{"url":"https://github.com/advisories/GHSA-rjpw-p967-pqvx"}],"sources":{"cve":[{"id":"CVE-2015-2797","description":"Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.","status":"published","published":"2015-06-19T14:00:00Z","modified":"2024-08-06T05:24:38.943Z","updated_at":"2026-11-02T14:35:41.621934Z"}],"euvd":[{"id":"EUVD-2015-2885","description":"Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.","status":"published","published":"2015-06-19T14:00:00Z","modified":"2024-08-06T05:24:38Z","updated_at":"2026-11-03T02:22:10.564423Z"}],"ghsa":[{"id":"GHSA-rjpw-p967-pqvx","title":"Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442,...","description":"Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.","status":"published","published":"2022-05-17T03:33:45Z","modified":"2025-04-12T12:50:13Z","cwes":["CWE-119"],"updated_at":"2026-11-02T15:01:22.814855Z"}],"nvd":[{"id":"CVE-2015-2797","description":"Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with firmware 1.0.2.0 and earlier allows remote attackers to execute arbitrary code via a long string in the redirect parameter to cgi-bin/login.","status":"published","published":"2015-06-19T14:59:00.067Z","modified":"2026-06-17T00:24:46.387Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:03:05.884985Z"}]}}