Lucene search

MitreCVE-2022-41522

HistoryOct 06, 2022 - 7:15 p.m.

CVE-2022-41522

2022-10-0619:15:10

CWE-787

mitre

web.nvd.nist.gov

totolink

nr1800x

cve-2022-41522

unauthenticated

stack overflow

nvd

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain an unauthenticated stack overflow via the “main” function.

Affected configurations

Nvd

Node

totolinknr1800x_firmwareMatch9.1.0u.6279_b20210910

AND

totolinknr1800xMatch-

VendorProductVersionCPE
totolinknr1800x_firmware9.1.0u.6279_b20210910cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6279_b20210910:*:*:*:*:*:*:*
totolinknr1800x-cpe:2.3:h:totolink:nr1800x:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
totolink	nr1800x_firmware	9.1.0u.6279_b20210910	cpe:2.3:o:totolink:nr1800x_firmware:9.1.0u.6279_b20210910:::::::*
totolink	nr1800x	-	cpe:2.3:h:totolink:nr1800x:-:::::::*

References

brief-nymphea-813.notion.site/NR1800X-bof-main-pre-authentication-29ccdaa7af054674828f7b3cf38aae82

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.7

Confidence

High

EPSS

0.002

Percentile

64.9%

JSON

Related for CVE-2022-41522