Lucene search

[email protected]NVD:CVE-2022-26987

HistoryMay 10, 2022 - 3:15 p.m.

CVE-2022-26987

2022-05-1015:15:07

CWE-787

[email protected]

web.nvd.nist.gov

tp-link

mercury d196g

fast

routers

stack overflow

mmtateprase

remote code execution

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

56.2%

JSON

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in MmtAtePrase function. Local users could get remote code execution.

Affected configurations

Nvd

Node

tp-linktl-wdr7660Match-

AND

tp-linktl-wdr7660_firmwareMatch2.0.30

Node

tp-linktl-wdr7661Match-

AND

tp-linktl-wdr7661_firmwareMatch-

Node

tp-linktl-wdr7620Match-

AND

tp-linktl-wdr7620_firmwareMatch-

Node

tp-linktl-wdr5660Match-

AND

tp-linktl-wdr5660_firmwareMatch-

Node

mercusysmercury_d196gMatch-

AND

mercusysmercury_d196g_firmwareMatch20200109_2.0.4

Node

fastcomfac1900rMatch-

AND

fastcomfac1900r_firmwareMatch20190827_2.0.2

VendorProductVersionCPE
tp-linktl-wdr7660-cpe:2.3:h:tp-link:tl-wdr7660:-:*:*:*:*:*:*:*
tp-linktl-wdr7660_firmware2.0.30cpe:2.3:o:tp-link:tl-wdr7660_firmware:2.0.30:*:*:*:*:*:*:*
tp-linktl-wdr7661-cpe:2.3:h:tp-link:tl-wdr7661:-:*:*:*:*:*:*:*
tp-linktl-wdr7661_firmware-cpe:2.3:o:tp-link:tl-wdr7661_firmware:-:*:*:*:*:*:*:*
tp-linktl-wdr7620-cpe:2.3:h:tp-link:tl-wdr7620:-:*:*:*:*:*:*:*
tp-linktl-wdr7620_firmware-cpe:2.3:o:tp-link:tl-wdr7620_firmware:-:*:*:*:*:*:*:*
tp-linktl-wdr5660-cpe:2.3:h:tp-link:tl-wdr5660:-:*:*:*:*:*:*:*
tp-linktl-wdr5660_firmware-cpe:2.3:o:tp-link:tl-wdr5660_firmware:-:*:*:*:*:*:*:*
mercusysmercury_d196g-cpe:2.3:h:mercusys:mercury_d196g:-:*:*:*:*:*:*:*
mercusysmercury_d196g_firmware20200109_2.0.4cpe:2.3:o:mercusys:mercury_d196g_firmware:20200109_2.0.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tp-link	tl-wdr7660	-	cpe:2.3:h:tp-link:tl-wdr7660:-:::::::*
tp-link	tl-wdr7660_firmware	2.0.30	cpe:2.3:o:tp-link:tl-wdr7660_firmware:2.0.30:::::::*
tp-link	tl-wdr7661	-	cpe:2.3:h:tp-link:tl-wdr7661:-:::::::*
tp-link	tl-wdr7661_firmware	-	cpe:2.3:o:tp-link:tl-wdr7661_firmware:-:::::::*
tp-link	tl-wdr7620	-	cpe:2.3:h:tp-link:tl-wdr7620:-:::::::*
tp-link	tl-wdr7620_firmware	-	cpe:2.3:o:tp-link:tl-wdr7620_firmware:-:::::::*
tp-link	tl-wdr5660	-	cpe:2.3:h:tp-link:tl-wdr5660:-:::::::*
tp-link	tl-wdr5660_firmware	-	cpe:2.3:o:tp-link:tl-wdr5660_firmware:-:::::::*
mercusys	mercury_d196g	-	cpe:2.3:h:mercusys:mercury_d196g:-:::::::*
mercusys	mercury_d196g_firmware	20200109_2.0.4	cpe:2.3:o:mercusys:mercury_d196g_firmware:20200109_2.0.4:::::::*

Rows per page:

1-10 of 121

References

tp-link.com

drive.google.com/file/d/1SnNoqRlJiBD673UROLwdgg_roMOneVR9/view?usp=sharing

github.com/GANGE666

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

56.2%

JSON

Related for NVD:CVE-2022-26987

cve1 cvelist1 prion1