PT-2022-19571
CVE-2022-29391
·
Published
2022-05-10
·
Updated
2022-05-16
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
TOTOLINK N600R version 4.3.0cu.7647 B20210106
Description
A stack overflow issue was discovered via the
comment parameter in the function FUN 004200c8.Recommendations
For TOTOLINK N600R version 4.3.0cu.7647 B20210106, consider restricting access to the
FUN 004200c8 function to minimize the risk of exploitation. Avoid using the comment parameter in the affected function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability. Found an issue in the description? Have something to add? Feel free to write us 👾