VULNERABILITY INTELLIGENCE

CVE-2015-5993

CVSS score7.8 HIGH

EPSS probability1.55%

CISA KEVNot currently listed

Published2015-09-21

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:C

Description

Buffer overflow in form2ping.cgi on Philippine Long Distance Telephone (PLDT) SpeedSurf 504AN devices with firmware GAN9.8U26-4-TX-R6B018-PH.EN and Kasda KW58293 devices allows remote attackers to cause a denial of service (device outage) via a long ipaddr parameter.

Weakness classification

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references

cret@cert.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource