Lucene search
HistorySep 06, 2022 - 5:15 p.m.
CVE-2022-37842
totolink a860r infostat.cgi buffer overflow
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.9%
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer overflow vulnerability.
Affected configurations
Node
totolinka860r_firmwareMatch4.1.2cu.5182_b20201027
totolinka860rMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| totolink | a860r_firmware | 4.1.2cu.5182_b20201027 | cpe:2.3:o:totolink:a860r_firmware:4.1.2cu.5182_b20201027:*:*:*:*:*:*:* |
| totolink | a860r | - | cpe:2.3:h:totolink:a860r:-:*:*:*:*:*:*:* |
Related
prion
prion
Buffer overflow
2022-09-06 17:15:00
cvelist
cvelist
CVE-2022-37842
2022-09-06 16:43:02
cve
cve
CVE-2022-37842
2022-09-06 17:15:08
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
65.9%
Related for NVD:CVE-2022-37842