Lucene search
HistoryNov 23, 2022 - 4:15 p.m.
CVE-2022-44256
totolink lr350 buffer overflow post-authentication setlanguagecfg parameter lang
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
40.8%
TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.
Affected configurations
Node
totolinknr1800x_firmwareMatch9.3.5u.6369_b20220309
totolinknr1800xMatch-
Related
cvelist
cvelist
CVE-2022-44256
2022-11-23 00:00:00
cve
cve
CVE-2022-44256
2022-11-23 16:15:10
prion
prion
Design/Logic Flaw
2022-11-23 16:15:00
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.001 Low
EPSS
Percentile
40.8%
Related for NVD:CVE-2022-44256