Lucene search

MitreCVE-2022-37842

HistorySep 06, 2022 - 5:15 p.m.

CVE-2022-37842

2022-09-0617:15:08

CWE-120

mitre

web.nvd.nist.gov

cve-2022-37842

totolink

a860r

v4.1.2cu.5182_b20201027

infostat.cgi

buffer overflow

vulnerability

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

65.9%

JSON

In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.

Affected configurations

Nvd

Node

totolinka860r_firmwareMatch4.1.2cu.5182_b20201027

AND

totolinka860rMatch-

VendorProductVersionCPE
totolinka860r_firmware4.1.2cu.5182_b20201027cpe:2.3:o:totolink:a860r_firmware:4.1.2cu.5182_b20201027:*:*:*:*:*:*:*
totolinka860r-cpe:2.3:h:totolink:a860r:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	a860r_firmware	4.1.2cu.5182_b20201027	cpe:2.3:o:totolink:a860r_firmware:4.1.2cu.5182_b20201027:::::::*
totolink	a860r	-	cpe:2.3:h:totolink:a860r:-:::::::*

References

github.com/1759134370/iot/blob/main/TOTOLINK/A860R/1.md

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

65.9%

JSON

Related for CVE-2022-37842