Lucene search

K
cvelistMitreCVELIST:CVE-2022-27255
HistoryAug 01, 2022 - 11:43 a.m.

CVE-2022-27255

2022-08-0111:43:25
mitre
www.cve.org
6
realtek
ecos
rsdk
msdk
sip alg
buffer overflow
stack-based
remote code execution
authentication bypass
sip packet
sdp data
cve-2022-27255

AI Score

9.8

Confidence

High

EPSS

0.056

Percentile

93.4%

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.

AI Score

9.8

Confidence

High

EPSS

0.056

Percentile

93.4%