CVE-2022-40999

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-40999

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these...

CVE-2022-40999

CVE-2022-40999 corresponds to multiple stack-based buffer overflow vulnerabilities in the Siretta QUARTZ-GOLD DetranCLI command parsing. The TALOS report details a specific vulnerability class affecting the GRE index tunnel command template (gre index tunnel A.B.C.D source dest keepalive interva...