CVE-2022-46560

Katalog CVE

CVSS 7.2 · High EPSS 1,5%

Kerentanan Out-of-bounds Write pada dlink dir-882 a1 firmware. Skor CVSS 3.1 7.2 (High) menurut NVD.

Deskripsi (NVD)

D-Link DIR-882 DIR882A1_FW130B06, DIR-878 DIR_878_FW1.30B08 was discovered to contain a stack overflow via the Password parameter in the SetWan2Settings module.

Rincian

Terbit di NVD

23 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.2 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,5% peluang dieksploitasi; lebih tinggi dari 72,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dlink.com/en/security-bulletin/ advisory vendor
• https://hackmd.io/%400dayResearch/SetWan2Settings_l2tp
• https://hackmd.io/%400dayResearch/SetWan2Settings_pppoe
• https://hackmd.io/%400dayResearch/SetWan2Settings_pptp
• https://hackmd.io/%400dayResearch/rkXr4BQPi