PT-2022-23784 · H3C · H3C Gr-1200W

Name of the Vulnerable Software and Affected Versions: H3C GR-1200W version MiniGRW1A0V100R006 Description: A command injection issue was discovered via the param parameter at DelL2tpLNSList. Recommendations: For H3C GR-1200W version MiniGRW1A0V100R006, consider restricting access to the...

CVE-2022-37134

D-link DIR-816 A2v1.10CNB04.img is vulnerable to Buffer Overflow via /goform/form2Wan.cgi. When wantype is 3, l2tpusrname will be decrypted by base64, and the result will be stored in v94, which does not check the size of l2tpusrname, resulting in stack overflow...

D-Link DIR-816 安全漏洞

The D-Link DIR-816 is a wireless router from AUO D-Link of Taiwan, China. A buffer overflow vulnerability exists in the mirrored version of the D-link DIR-816 firmware A2v1.10CNB04.img. The vulnerability stems from the fact that when the wantype of its /goform/form2Wan.cgi component is 3, the...

PT-2022-23830 · D Link · D-Link Dir-816

Name of the Vulnerable Software and Affected Versions: D-link DIR-816 version A2 v1.10CNB04.img Description: The issue arises from a Buffer Overflow vulnerability via the /goform/form2Wan.cgi endpoint. When wantype is 3, the l2tp usrname will be decrypted by base64, and the result will be stored ...

PT-2022-6241

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw was found in the Linux kernel's Layer 2 Tunneling Protocol L2TP due to a missing lock when clearing sk user data, which can lead to a race condition and NULL pointer dereference...

PT-2022-33103

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.249 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. This problem has been identified but its actual impact and potential for attack have not been confirmed...

PT-2022-32576

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.6 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-32918

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.124 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32768

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.49 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33026

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.200 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33209

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.320 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...

PT-2022-33162

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.285 Description The issue is related to a signed integer overflow in the l2tp ip6 sendmsg function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

CVE-2022-30211

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

Remote code execution

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2022-30211

CVE-2022-30211 is described as a Windows L2TP Remote Code Execution vulnerability. The connected sources provide CVSS v3.1 data: vector NETWORK, high impact on confidentiality/integrity/availability (C:H/I:H/A:H) with base score 7.5, and attack complexity HIGH with privileges required LOW. The in...

CVE-2022-30211 Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

...

Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability

...

CVE-2022-30211: Undefined Security Weakness

Windows Layer 2 Tunneling Protocol L2TP Remote Code Execution Vulnerability...

CVE-2022-27289

D-Link DIR-619 Ax v1.00 was discovered to contain a stack overflow in the function formSetWanL2TP. This vulnerability allows attackers to cause a Denial of Service DoS via the curTime parameter...

CVE-2021-45736

TOTOLINK X5000R v9.1.0u.6118B20201102 was discovered to contain a stack overflow in the function setL2tpServerCfg. This vulnerability allows attackers to cause a Denial of Service DoS via the eip, sip, server parameters...