CVE-2022-47035

CWE-120 — Classic Buffer Overflow3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.8%
top 25.93%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dlink Dir-825 Firmware
Timeline
PublishedJan 31

Description

Buffer Overflow Vulnerability in D-Link DIR-825 v1.33.0.44ebdd4-embedded and below allows attacker to execute arbitrary code via the GetConfig method to the /CPE endpoint.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDdlink/dir-825_firmware1.33.0.44ebdd4-embedded

Patches

Patch: supportannouncement.us.dlink.com ↗Patch: supportannouncement.us.dlink.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-p8h8-37jj-3jqq: Buffer Overflow Vulnerability in D-Link DIR-825 v1↗2023-01-31
▶
CVEList
CVE-2022-47035: Buffer Overflow Vulnerability in D-Link DIR-825 v1↗2023-01-31
▶
CVE-2022-47035 (CRITICAL CVSS 9.8) | Buffer Overflow Vulnerability in D- | cvebase.io