Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-27631
HistoryAug 05, 2022 - 10:15 p.m.

CVE-2022-27631

2022-08-0522:15:11
CWE-787
[email protected]
web.nvd.nist.gov
4
dd-wrt
memory corruption
httpd vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

83.0%

JSON

A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

Affected configurations

Nvd
Node
dd-wrtdd-wrtRange32270–48599
VendorProductVersionCPE
dd-wrtdd-wrt*cpe:2.3:o:dd-wrt:dd-wrt:*:*:*:*:*:*:*:*

Related

talos 1
prion 1
cvelist 1
cve 1
talosblog 2
talos
talos
DD-WRT httpd unescape memory corruption vulnerability
2022-07-27 00:00:00
prion
prion
Memory corruption
2022-08-05 22:15:00
cvelist
cvelist
CVE-2022-27631
2022-08-05 21:19:29
cve
cve
CVE-2022-27631
2022-08-05 22:15:11
talosblog
talosblog
Vulnerability Spotlight: How a code re-use issue led to vulnerabilities across multiple products
2022-07-27 16:22:00
The many vulnerabilities Talos discovered in SOHO and industrial wireless routers post-VPNFilter
2023-08-02 12:00:19

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.009

Percentile

83.0%

JSON
Related for NVD:CVE-2022-27631
talos1prion1cvelist1cve1talosblog2