CVE-2019-17424

Published October 22nd, 2019

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

PROJECT

Description

A stack-based buffer overflow in the processPrivilage() function in IOS/process-general.c in nipper-ng 0.11.10 allows remote attackers (serving firewall configuration files) to achieve Remote Code Execution or Denial Of Service via a crafted file.

mavlevin/CVE-2019-17424

RCE Exploit For CVE-2019-17424 (nipper-ng 0.11.10)

GitHub