Unrated severityNVD Advisory· Published Aug 1, 2022· Updated Aug 3, 2024

CVE-2022-27255

Description

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Realtek/eCos RSDKllm-create
Range: =1.5.7p1
Realtek/MSDKllm-create
Range: =4.9.4p1

Patches

Vulnerability mechanics

References

forum.defcon.org/node/241835mitrex_refsource_MISC
www.realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-27255.pdfmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.030
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000