CVE-2022-35266

CVE-2022-35266 affects Robustel R1510, versions 3.1.16–3.3.0. The issue is a denial-of-service in the web_server hashFirst function that can crash the process when handling certain network requests to the /action/import_firmware/ API, due to unsafe handling of an index derived from input data. Ex...