Tasmota 16.0.0以前に重大な脆弱性、修正コミット公開
Summary
Tasmota 16.0.0以前で、同じネットワーク内から認証なしでメモリを破壊され、機器の停止や乗っ取りにつながる脆弱性が公表されました。ESP8266やESP32の機器を使う組織は、修正を取り込んだファームウェアへの更新と、UDPポート4447の到達範囲の制限を進めてください。
AI summary
Produced by SecPulse using an external AI model; it may contain mistakes. Check the original description and references below before acting on it.
Tasmota 16.0.0以前で、同じネットワーク内から認証なしでメモリを破壊され、機器の停止や乗っ取りにつながる脆弱性が公表されました。ESP8266やESP32の機器を使う組織は、修正を取り込んだファームウェアへの更新と、UDPポート4447の到達範囲の制限を進めてください。
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| arendstTasmota |
≤ 16.0.0→ Not listed |
Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated attackers on the local network to corrupt heap memory by sending crafted Device Groups messages over UDP port 4447 that cause the log_remaining counter to go negative and writes to exceed the fixed 512-byte buffer. Attackers can exploit this flaw to crash the device or potentially achieve native code execution on ESP8266 and ESP32 platforms that lack ASLR and heap cookies.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory vulncheck.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web github.com