CVE-2022-2070: grandstream gds3710_firmware Stack-based Buffer Overflow

Vulnerability summary

CVE-2022-2070 is a critical (CVSS 9.8) Stack-based Buffer Overflow vulnerability in grandstream gds3710_firmware. EPSS estimates a 5.84% chance of exploitation in the next 30 days, higher than 93.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 23-09-2022
   PublishedVulnerability first disclosed.
2. 22-05-2025
   Last modifiedVulnerability information updated.

Description

In Grandstream GSD3710 in its 1.0.11.13 version, it's possible to overflow the stack since it doesn't check the param length before using the sscanf instruction. Because of that, an attacker could create a socket and connect with a remote IP:port by opening a shell and getting full access to the system. The exploit affects daemons dbmng and logsrv that are running on ports 8000 and 8001 by default.

• CWE-121Stack-based Buffer OverflowA stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.