CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.8. See the original NVD description below for full technical details.
CVE
CVE-2022-1669
Severity
MEDIUM
CVSS
6.8
EPSS
0.76%
Original NVD Description
A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary (index.cgi) to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Address" value and it would be copied to a second variable with a "strcpy" vulnerable function without checking its length. Because of this, it is possible to send a long address value to overflow the process stack, controlling the function return address.
Related CVEs
Other vulnerabilities affecting the same vendor(s)