Lucene search
HistorySep 06, 2022 - 5:15 p.m.
CVE-2022-37840
cve-2022-37840
totolink
a860r
v4.1.2cu.5182_b20201027
downloadfile.cgi
buffer overflow
vulnerability
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
66.0%
In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.
Affected configurations
Node
totolinka860r_firmwareMatch4.1.2cu.5182_b20201027
totolinka860rMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| totolink:a860r_firmware | totolink a860r firmware | eq | 4.1.2cu.5182_b20201027 |
Social References
More
Related
cvelist
cvelist
CVE-2022-37840
2022-09-06 16:40:44
prion
prion
Buffer overflow
2022-09-06 17:15:00
nvd
nvd
CVE-2022-37840
2022-09-06 17:15:08
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.6 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
66.0%
Related for CVE-2022-37840