CVE-2022-41025

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41026

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41028

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41021

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41028

CVE-2022-41028 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020). TALOS reports multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the no vpn schedule name1 WORD name2 WORD policy (failover|backup) description (WORD|null) template. Root cause...

CVE-2022-41027

CVE-2022-41027 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/Cisco and Red Hat/CVE records describe multiple stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the template for the command: vpn schedule name1 WORD name2 WORD policy (failover|...

CVE-2022-41018

CVE-2022-41018 affects Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) via stack-based buffer overflow vulnerabilities in the DetranCLI command parsing logic. The exploits target the no vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|off) defroute (on|o...

CVE-2022-41016

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41014

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41013

CVE-2022-41013 affects Siretta QUARTZ-GOLD DetranCLI. TALOS reports stack-based buffer overflow vulnerabilities in the DetranCLI parser for the command template static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null). A crafted network packet can trigger an overfl...

CVE-2022-41017

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41016

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41018

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41019

CVE-2022-41019 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. The vulnerability is a stack-based buffer overflow in the Det r a nCLI command parsing, triggered by the template handling: vpn l2tp advanced name WORD dns (yes|no) mtu mru auth (on|off) password (WORD|null). A specially crafted...

CVE-2022-41019

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41011

CVE-2022-41011 concerns Siretta QUARTZ-GOLD, version G5.0.1.5-210720-141020. Talos reports multiple stack-based buffer overflows in the DetranCLI command parsing for the template: schedule link1 WORD link2 WORD policy (failover|backup) description (WORD|null). Successful exploitation could lead t...

CVE-2022-41018

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-41017

CVE-2022-41017 affects Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. Talos/NVD entries describe several stack-based buffer overflow vulnerabilities in the DetranCLI command parsing, specifically in the vpn basic protocol (l2tp|pptp) name WORD server WORD username WORD passsword WORD firmwall (on|of...

CVE-2022-41014

Siretta QUARTZ-GOLD (G5.0.1.5-210720-141020) is affected by CVE-2022-41014 due to stack-based buffer overflow in the DetranCLI command parsing. The vulnerability affects the command template: no static dhcp mac WORD (WORD|null) ip A.B.C.D hostname (WORD|null) description (WORD|null). A crafted ne...

CVE-2022-41013

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...