Lucene search
HistorySep 06, 2022 - 5:15 p.m.
CVE-2022-37840
totolink a860r v4.1.2cu
downloadfile.cgi
buffer overflow
vulnerability
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.9%
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
Affected configurations
Node
totolinka860r_firmwareMatch4.1.2cu.5182_b20201027
totolinka860rMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| totolink | a860r_firmware | 4.1.2cu.5182_b20201027 | cpe:2.3:o:totolink:a860r_firmware:4.1.2cu.5182_b20201027:*:*:*:*:*:*:* |
| totolink | a860r | - | cpe:2.3:h:totolink:a860r:-:*:*:*:*:*:*:* |
Related
prion
prion
Buffer overflow
2022-09-06 17:15:00
cvelist
cvelist
CVE-2022-37840
2022-09-06 16:40:44
cve
cve
CVE-2022-37840
2022-09-06 17:15:08
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.9%
Related for NVD:CVE-2022-37840