PT-2022-19577
CVE-2022-29397
·
Published
2022-05-10
·
Updated
2022-05-16
Description by
CVSS 2.0
10
CriticalMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TOTOLINK N600R version 4.3.0cu.7647 B20210106
Description
A stack overflow issue was discovered via the
comment parameter in the function FUN 004196c8. This issue affects the TOTOLINK N600R router.Recommendations
For TOTOLINK N600R version 4.3.0cu.7647 B20210106, as a temporary workaround, consider restricting access to the function
FUN 004196c8 until a patch is available. Avoid using the comment parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue. Found an issue in the description? Have something to add? Feel free to write us 👾