Lucene search

MitreCVE-2022-26987

HistoryMay 10, 2022 - 3:15 p.m.

CVE-2022-26987

2022-05-1015:15:07

CWE-787

mitre

web.nvd.nist.gov

cve-2022-26987

tp-link

mercury

fast

routers

stack overflow

rce

nvd

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

56.2%

JSON

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in MmtAtePrase function. Local users could get remote code execution.

Affected configurations

Nvd

Node

tp-linktl-wdr7660Match-

AND

tp-linktl-wdr7660_firmwareMatch2.0.30

Node

tp-linktl-wdr7661Match-

AND

tp-linktl-wdr7661_firmwareMatch-

Node

tp-linktl-wdr7620Match-

AND

tp-linktl-wdr7620_firmwareMatch-

Node

tp-linktl-wdr5660Match-

AND

tp-linktl-wdr5660_firmwareMatch-

Node

mercusysmercury_d196gMatch-

AND

mercusysmercury_d196g_firmwareMatch20200109_2.0.4

Node

fastcomfac1900rMatch-

AND

fastcomfac1900r_firmwareMatch20190827_2.0.2

VendorProductVersionCPE
tp-linktl-wdr7660-cpe:2.3:h:tp-link:tl-wdr7660:-:*:*:*:*:*:*:*
tp-linktl-wdr7660_firmware2.0.30cpe:2.3:o:tp-link:tl-wdr7660_firmware:2.0.30:*:*:*:*:*:*:*
tp-linktl-wdr7661-cpe:2.3:h:tp-link:tl-wdr7661:-:*:*:*:*:*:*:*
tp-linktl-wdr7661_firmware-cpe:2.3:o:tp-link:tl-wdr7661_firmware:-:*:*:*:*:*:*:*
tp-linktl-wdr7620-cpe:2.3:h:tp-link:tl-wdr7620:-:*:*:*:*:*:*:*
tp-linktl-wdr7620_firmware-cpe:2.3:o:tp-link:tl-wdr7620_firmware:-:*:*:*:*:*:*:*
tp-linktl-wdr5660-cpe:2.3:h:tp-link:tl-wdr5660:-:*:*:*:*:*:*:*
tp-linktl-wdr5660_firmware-cpe:2.3:o:tp-link:tl-wdr5660_firmware:-:*:*:*:*:*:*:*
mercusysmercury_d196g-cpe:2.3:h:mercusys:mercury_d196g:-:*:*:*:*:*:*:*
mercusysmercury_d196g_firmware20200109_2.0.4cpe:2.3:o:mercusys:mercury_d196g_firmware:20200109_2.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	tl-wdr7660	-	cpe:2.3:h:tp-link:tl-wdr7660:-:::::::*
tp-link	tl-wdr7660_firmware	2.0.30	cpe:2.3:o:tp-link:tl-wdr7660_firmware:2.0.30:::::::*
tp-link	tl-wdr7661	-	cpe:2.3:h:tp-link:tl-wdr7661:-:::::::*
tp-link	tl-wdr7661_firmware	-	cpe:2.3:o:tp-link:tl-wdr7661_firmware:-:::::::*
tp-link	tl-wdr7620	-	cpe:2.3:h:tp-link:tl-wdr7620:-:::::::*
tp-link	tl-wdr7620_firmware	-	cpe:2.3:o:tp-link:tl-wdr7620_firmware:-:::::::*
tp-link	tl-wdr5660	-	cpe:2.3:h:tp-link:tl-wdr5660:-:::::::*
tp-link	tl-wdr5660_firmware	-	cpe:2.3:o:tp-link:tl-wdr5660_firmware:-:::::::*
mercusys	mercury_d196g	-	cpe:2.3:h:mercusys:mercury_d196g:-:::::::*
mercusys	mercury_d196g_firmware	20200109_2.0.4	cpe:2.3:o:mercusys:mercury_d196g_firmware:20200109_2.0.4:::::::*

Rows per page:

1-10 of 121

References

tp-link.com

drive.google.com/file/d/1SnNoqRlJiBD673UROLwdgg_roMOneVR9/view?usp=sharing

github.com/GANGE666

Social References

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.1

Confidence

High

EPSS

0.002

Percentile

56.2%

JSON

Related for CVE-2022-26987