CVE-2022-41030

 

Published at: - 26-01-2023 11:15

Last modified: - 27-01-2023 03:03

Total changes: - 2

Description

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'no wlan filter mac address WORD descript WORD' command template.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://talosintelligence.com/vulnerability_reports/TALOS-2022-1613

 

Keywords

NVD

 

CVE-2022-41030

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures