On Patlite NH-FB series devices through 1.46, remote attackers can cause a denial of service by omitting the query string. NOTE: the vendor's perspective is that "omitting the query string does not cause a denial of service and the indicated event can not be reproduced.
The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
| Link | Tags |
|---|---|
| https://www.patlite.co.jp/product/detail0000021462.html | product vendor advisory |
| https://www.patlite.com/network-products/lineup/nh-fb.html | product vendor advisory |
| https://packetstormsecurity.com/files/167797/Patlite-1.46-Buffer-Overflow.html | exploit vdb entry third party advisory |