CyberRota Analysis
AI-GeneratedA heap-based buffer overflow vulnerability in openNDS versions prior to 11.0.0 allows unauthenticated attackers on the captive portal network to crash the openNDS daemon, resulting in a denial of service and the potential for remote code execution. Organizations utilizing openNDS should prioritize patching to mitigate the risk of exploitation, especially those with exposed captive portal networks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an unauthenticated attacker on the captive portal network to crash the openNDS daemon (denial of service) and potentially achieve remote code execution. This is in http_microhttpd.c.