CVE-2022-41517
published 2022-10-06CVE-2022-41517: TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function
PriorityP352high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.89%
56.9th percentile
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| totolink | nr1800x_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
TOTOLINK NR1800X 9.1.0u.6279_B20210910 setLanguageCfg lang stack-based overflow (EUVD-2022-44710)
vuldb·2026-08-05·CVSS 8.8
CVE-2022-41517 [HIGH] TOTOLINK NR1800X 9.1.0u.6279_B20210910 setLanguageCfg lang stack-based overflow (EUVD-2022-44710)
A vulnerability identified as critical has been detected in TOTOLINK NR1800X 9.1.0u.6279_B20210910. This impacts the function setLanguageCfg. Performing a manipulation of the argument lang results in stack-based buffer overflow.
This vulnerability is cataloged as CVE-2022-41517. The attack must originate from the local network. There is no exploit available.
GHSA
GHSA-363c-7592-r2hx: TOTOLINK NR1800X V9
ghsa_unreviewed·2022-10-06
CVE-2022-41517 [HIGH] CWE-787 GHSA-363c-7592-r2hx: TOTOLINK NR1800X V9
TOTOLINK NR1800X V9.1.0u.6279_B20210910 was discovered to contain a stack overflow in the lang parameter in the setLanguageCfg function
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-06
Published