CVE-2022-41022

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41025

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41023

CVE-2022-41023 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via stack-based buffer overflow in the DetranCLI command parsing for vpn pptp advanced name (and related templates). The issue arises from unsafe handling of command parameters (e.g., WORD, DNS, MTU, MRU, MPPE, stateful), enablin...

CVE-2022-41022

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41022

CVE-2022-41022 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The issue is a stack-based buffer overflow in the DetranCLI command parsing, specifically in the template handling the no vpn l2tp advanced name ... options WORD command. A crafted network packet can trigger the overflow and lead ...

CVE-2022-41029

CVE-2022-41029 is a set of stack-based buffer overflow vulnerabilities in the DetranCLI command parsing of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos confirms multiple vulnerable command templates (notably wlan filter mac address WORD descript WORD) that use unsafe formatting (sprintf) lea...

CVE-2022-41020

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41029

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41020

CVE-2022-41020 is a reported stack-based buffer overflow affecting the DetranCLI command parsing in Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos details show the vulnerability is reachable via the command template: no vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) password ...

CVE-2022-41028

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41029

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41027

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41026

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41024

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41020

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41026

CVE-2022-41026 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/Cisco CVE entry describes multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing for the template no vpn pptp advanced name (and related commands), enabling arbitrary command execution via craf...

CVE-2022-41023

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41025

CVE-2022-41025 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The TALOS report details stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the template handling for commands like vpn pptp advanced name dns (yes|no) mtu mru mppe (on|off) stateful (o...

CVE-2022-41024

The TALOS overview confirms CVE-2022-41024 corresponds to multiple stack-based buffer overflow flaws in Siretta QUARTZ-GOLD’s DetranCLI command parsing (G5.0.1.5-210720-141020). A crafted network request sequence can trigger the overflow in various DetranCLI command templates, enabling arbitrary ...

CVE-2022-41021

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...