deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-22774
Published: 2022-05-10
Description: The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, and TIBCO Managed File Transfer Internet Server contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to execute XML External Entity (XXE) attacks on the affected system. Affected releases are TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center: versions 8.3.1 and below, TIBCO Managed File Transfer Command Center: versions 8.4.0 and 8.4.1, TIBCO Managed File Transfer Internet Server: versions 8.3.1 and below, and TIBCO Managed File Transfer Internet Server: versions 8.4.0 and 8.4.1.
CVSS Score: 8.6 (HIGH)
CWE: CWE-611
References: https://www.tibco.com/services/support/advisories; https://www.tibco.com/support/advisories/2022/05/tibco-security-advisory-may-10-2022-tibco-mftcc-2022-22774; https://www.tibco.com/services/support/advisories
CVE: CVE-2021-26324
Published: 2022-05-10
Description: A bug with the SEV-ES TMR may lead to a potential loss of memory integrity for SNP-active VMs.
CVSS Score: 7.8 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE: CVE-2021-26332
Published: 2022-05-10
Description: Failure to verify SEV-ES TMR is not in MMIO space, SEV-ES FW could result in a potential loss of integrity or availability.
CVSS Score: 7.1 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE: CVE-2021-26352
Published: 2022-05-10
Description: Insufficient bound checks in System Management Unit (SMU) PCIe Hot Plug table may result in access/updates from/to invalid address space that could result in denial of service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26353
Published: 2022-05-10
Description: Failure to validate inputs in SMM may allow an attacker to create a mishandled error leaving the DRTM UApp in a partially initialized state potentially resulting in loss of memory integrity.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032; https://www.amd.com/en/corporate/product-security/bulletin/AMD-SB-1032
CVE: CVE-2021-26370
Published: 2022-05-10
Description: Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20, CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE: CVE-2021-26390
Published: 2022-05-10
Description: A malicious or compromised UApp or ABL may coerce the bootloader into corrupting arbitrary memory potentially leading to loss of integrity of data.
CVSS Score: 6.2 (MEDIUM)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1027
CVE: CVE-2021-26408
Published: 2022-05-10
Description: Insufficient validation of elliptic curve points in SEV-legacy firmware may compromise SEV-legacy guest migration potentially resulting in loss of guest's integrity or confidentiality.
CVSS Score: 7.1 (HIGH)
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE: CVE-2021-43010
Published: 2022-05-10
Description: In Safedog Apache v4.0.30255, attackers can bypass this product for SQL injection. Attackers can bypass access to sensitive data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: https://github.com/crow821/crowsec/tree/master/bypass_safedog1025; https://github.com/crow821/crowsec/tree/master/bypass_safedog1025
CVE: CVE-2021-46771
Published: 2022-05-10
Description: Insufficient validation of addresses in AMD Secure Processor (ASP) firmware system call may potentially lead to arbitrary code execution by a compromised user application.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021; https://www.amd.com/en/corporate/product-security/bulletin/amd-sb-1021
CVE: CVE-2022-0947
Published: 2022-05-10
Description: A vulnerability in ABB ARG600 Wireless Gateway series that could allow an attacker to exploit the vulnerability by remotely connecting to the serial port gateway, and/or protocol converter, depending on the configuration.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-665, CWE-665
References: https://search.abb.com/library/Download.aspx?DocumentID=2NGA001253&LanguageCode=en&DocumentPartId=&Action=Launch; https://search.abb.com/library/Download.aspx?DocumentID=2NGA001253&LanguageCode=en&DocumentPartId=&Action=Launch
CVE: CVE-2022-23676
Published: 2022-05-10
Description: A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-008.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-008.txt
CVE: CVE-2022-23677
Published: 2022-05-10
Description: A remote execution of arbitrary code vulnerability was discovered in ArubaOS-Switch Devices version(s): ArubaOS-Switch 15.xx.xxxx: All versions; ArubaOS-Switch 16.01.xxxx: All versions; ArubaOS-Switch 16.02.xxxx: K.16.02.0033 and below; ArubaOS-Switch 16.03.xxxx: All versions; ArubaOS-Switch 16.04.xxxx: All versions; ArubaOS-Switch 16.05.xxxx: All versions; ArubaOS-Switch 16.06.xxxx: All versions; ArubaOS-Switch 16.07.xxxx: All versions; ArubaOS-Switch 16.08.xxxx: KB/WB/WC/YA/YB/YC.16.08.0024 and below; ArubaOS-Switch 16.09.xxxx: KB/WB/WC/YA/YB/YC.16.09.0019 and below; ArubaOS-Switch 16.10.xxxx: KB/WB/WC/YA/YB/YC.16.10.0019 and below; ArubaOS-Switch 16.11.xxxx: KB/WB/WC/YA/YB/YC.16.11.0003 and below. Aruba has released upgrades for ArubaOS-Switch Devices that address these security vulnerabilities.
CVSS Score: 8.1 (HIGH)
CWE: CWE-787
References: https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-008.txt; https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-008.txt
CVE: CVE-2022-28986
Published: 2022-05-10
Description: LMS Doctor Simple 2 Factor Authentication Plugin For Moodle Affected:[PII_REDACTED] has an Insecure direct object references (IDOR) vulnerability, which allows remote attackers to update sensitive records such as email, password and phone number of other user accounts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: http://lms.com; http://simple.com; https://github.com/FlaviuPopescu/CVE-2022-28986
CVE: CVE-2021-39670
Published: 2022-05-10
Description: In setStream of WallpaperManager.java, there is a possible way to cause a permanent DoS due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-204087139
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-770
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2021-39700
Published: 2022-05-10
Description: In the policies of adbd.te, there was a logic error which caused the CTS Listening Ports Test to report invalid results. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Android ID: A-201645790
CVSS Score: 5.5 (MEDIUM)
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-1209
Published: 2022-05-10
Description: The Ultimate Member plugin for WordPress is vulnerable to arbitrary redirects due to insufficient validation on supplied URLs in the social fields of the Profile Page, which makes it possible for attackers to redirect unsuspecting victims in versions up to, and including, 2.3.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://github.com/H4de5-7/vulnerabilities/blob/main/Ultimate%20Member%20%3C%3D%202.3.1%20-%20Open%20Redirect.md; https://github.com/ultimatemember/ultimatemember/issues/989; https://github.com/ultimatemember/ultimatemember/pull/990
CVE: CVE-2022-1442
Published: 2022-05-10
Description: The Metform WordPress plugin is vulnerable to sensitive information disclosure due to improper access control in the ~/core/forms/action.php file which can be exploited by an unauthenticated attacker to view all API keys and secrets of integrated third-party APIs like that of PayPal, Stripe, Mailchimp, Hubspot, HelpScout, reCAPTCHA and many more, in versions up to and including 2.1.3.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-862, CWE-862
References: https://gist.github.com/Xib3rR4dAr/6e6c6e5fa1f8818058c7f03de1eda6bf; https://plugins.trac.wordpress.org/changeset/2711944/metform/trunk/core/forms/action.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/04a46249-b5b2-4082-b520-cdc4a1370bb1?source=cve
CVE: CVE-2022-1453
Published: 2022-05-10
Description: The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-util.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.5.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89, CWE-89
References: https://github.com/davidfcarr/rsvpmaker/commit/bfb189f49af7ab0d34499a2da772e3266f72167d; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2714389%40rsvpmaker&new=2714389%40rsvpmaker&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/6031edec-4274-4e42-9e3a-ce0c94958b17?source=cve
CVE: CVE-2022-1463
Published: 2022-05-10
Description: The Booking Calendar plugin for WordPress is vulnerable to PHP Object Injection via the [bookingflextimeline] shortcode in versions up to, and including, 9.1. This could be exploited by subscriber-level users and above to call arbitrary PHP objects on a vulnerable site.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://www.wordfence.com/blog/2022/04/php-object-injection-in-booking-calendar-plugin/; https://www.wordfence.com/blog/2022/04/php-object-injection-in-booking-calendar-plugin/
CVE: CVE-2022-1476
Published: 2022-05-10
Description: The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~/lib/model/class-ai1wm-backups.php file, in versions up to, and including, 7.58. This can be exploited by administrative users, and users who have access to the site's secret key.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2715609%40all-in-one-wp-migration&new=2715609%40all-in-one-wp-migration&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/e58634c3-7fcd-4885-b897-4e6a97fb06ac?source=cve; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1476
CVE: CVE-2022-1505
Published: 2022-05-10
Description: The RSVPMaker plugin for WordPress is vulnerable to unauthenticated SQL Injection due to missing SQL escaping and parameterization on user supplied data passed to a SQL query in the rsvpmaker-api-endpoints.php file. This makes it possible for unauthenticated attackers to steal sensitive information from the database in versions up to and including 9.2.6.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89, CWE-89, CWE-89
References: https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2715095%40rsvpmaker&new=2715095%40rsvpmaker&sfp_email=&sfph_mail=; https://www.wordfence.com/threat-intel/vulnerabilities/id/6837b91d-b3ba-435a-965b-fa18d9b9b9c8?source=cve; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1505
CVE: CVE-2022-1567
Published: 2022-05-10
Description: The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79, CWE-79
References: https://plugins.trac.wordpress.org/browser/wp-js/trunk/wp-js.php?rev=100281#L140; https://www.wordfence.com/threat-intel/vulnerabilities/id/0ab82117-73dd-4257-8dfc-01dadcc3a83f?source=cve; https://www.wordfence.com/vulnerability-advisories/#CVE-2022-1567
CVE: CVE-2022-20004
Published: 2022-05-10
Description: In checkSlicePermission of SliceManagerService.java, it is possible to access any slice URI due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-179699767
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20005
Published: 2022-05-10
Description: In validateApkInstallLocked of PackageInstallerSession.java, there is a way to force a mismatch between running code and a parsed APK . This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-219044664
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20006
Published: 2022-05-10
Description: In several functions of KeyguardServiceWrapper.java and related files,, there is a possible way to briefly view what's under the lockscreen due to a race condition. This could lead to local escalation of privilege if a Guest user is enabled, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-151095871
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://source.android.com/security/bulletin/2022-06-01; https://source.android.com/security/bulletin/2022-06-01
CVE: CVE-2022-20007
Published: 2022-05-10
Description: In startActivityForAttachedApplicationIfNeeded of RootWindowContainer.java, there is a possible way to overlay an app that believes it's still in the foreground, when it is not, due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-211481342
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20008
Published: 2022-05-10
Description: In mmc_blk_read_single of block.c, there is a possible way to read kernel heap memory due to uninitialized data. This could lead to local information disclosure if reading from an SD card that triggers errors, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-216481035References: Upstream kernel
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-908
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20009
Published: 2022-05-10
Description: In various functions of the USB gadget subsystem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-213172319References: Upstream kernel
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-787
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20010
Published: 2022-05-10
Description: In l2cble_process_sig_cmd of l2c_ble.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-213519176
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20011
Published: 2022-05-10
Description: In getArray of NotificationManagerService.java , there is a possible leak of one user notifications to another due to missing check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-214999128
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20112
Published: 2022-05-10
Description: In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-206987762
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20113
Published: 2022-05-10
Description: In mPreference of DefaultUsbConfigurationPreferenceController.java, there is a possible way to enable file transfer mode due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-205996517
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20114
Published: 2022-05-10
Description: In placeCall of TelecomManager.java, there is a possible way for an application to keep itself running with foreground service importance due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-211114016
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20115
Published: 2022-05-10
Description: In broadcastServiceStateChanged of TelephonyRegistry.java, there is a possible way to learn base station information without location permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-210118427
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-862
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-20116
Published: 2022-05-10
Description: In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12LAndroid ID: A-212467440
CVSS Score: 7.8 (HIGH)
References: https://source.android.com/security/bulletin/2022-05-01; https://source.android.com/security/bulletin/2022-05-01
CVE: CVE-2022-27167
Published: 2022-05-10
Description: Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features what may lead to arbitrary file deletion. This issue affects: ESET, spol. s r.o. ESET NOD32 Antivirus 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Internet Security 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Smart Security Premium 11.2 versions prior to 15.1.12.0. ESET, spol. s r.o. ESET Endpoint Antivirus 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Endpoint Security 6.0 versions prior to 9.0.2046.0. ESET, spol. s r.o. ESET Server Security for Microsoft Windows Server 8.0 versions prior to 9.0.12012.0. ESET, spol. s r.o. ESET File Security for Microsoft Windows Server 8.0.12013.0. ESET, spol. s r.o. ESET Mail Security for Microsoft Exchange Server 6.0 versions prior to 8.0.10020.0. ESET, spol. s r.o. ESET Mail Security for IBM Domino 6.0 versions prior to 8.0.14011.0. ESET, spol. s r.o. ESET Security for Microsoft SharePoint Server 6.0 versions prior to 8.0.15009.0.
CVSS Score: 7.1 (HIGH)
CWE: CWE-280, CWE-755
References: https://support.eset.com/en/ca8268; https://support.eset.com/en/ca8268
CVE: CVE-2022-29391
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004200c8.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/5.setStaticDhcpConfig; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/5.setStaticDhcpConfig
CVE: CVE-2022-29392
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_00418c24.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/2.setPortForwardRules; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/2.setPortForwardRules
CVE: CVE-2022-29393
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN_004192cc.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/3.setIpQosRules; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/3.setIpQosRules
CVE: CVE-2022-29394
Published: 2022-05-10
Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macAddress parameter in the function FUN_0041b448.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/1.setWiFiAclAddConfig; https://github.com/d1tto/IoT-vuln/tree/main/Totolink/1.setWiFiAclAddConfig