CVE-2022-29643 - TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos

Back Back to CVE browser

HIGH

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos

Published May 18, 2022

7.5

HIGH

CVSS 3.1

EPSS 1.16%

Description

TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 were discovered to contain a stack overflow via the macAddress parameter in the function setMacQos. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

References (1)

https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/6.md
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/shijin0925/IOT/blob/master/TOTOLINK%20A3100R/6.md		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 18, 2022

Updated Aug 3, 2024

Reserved Apr 25, 2022

Link CVE-2022-29643

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-29643

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-29643