CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CWE-119

Children

CVEs mapped to this weakness (15,182)

page 385 of 760

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-36484	Totolink N350R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
CVE-2022-36483	Totolink N350R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36482	Totolink N350R	Hig	0.51	7.8	0.01	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
CVE-2022-36480	Totolink N350R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36478	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID.
CVE-2022-36477	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList.
CVE-2022-36475	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList.
CVE-2022-36474	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet.
CVE-2022-36473	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVE-2022-36472	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
CVE-2022-36471	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode.
CVE-2022-36470	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById.
CVE-2022-36469	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
CVE-2022-36468	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
CVE-2022-36467	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d.
CVE-2022-36466	Totolink A3700R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
CVE-2022-36465	Totolink A3700R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36464	Totolink A3700R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVE-2022-36463	Totolink A3700R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36462	Totolink A3700R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.

CVE-2022-36484HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.00
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
CVE-2022-36483HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.00
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36482HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.01
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
CVE-2022-36480HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.00
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36478HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID.
CVE-2022-36477HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList.
CVE-2022-36475HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList.
CVE-2022-36474HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet.
CVE-2022-36473HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVE-2022-36472HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
CVE-2022-36471HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode.
CVE-2022-36470HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById.
CVE-2022-36469HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
CVE-2022-36468HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Asp_SetTimingtimeWifiAndLed.
CVE-2022-36467HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function EditMacList.d.
CVE-2022-36466HigAug 25, 2022
Totolink
A3700R
risk 0.51cvss 7.8epss 0.00
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the ip parameter in the function setDiagnosisCfg.
CVE-2022-36465HigAug 25, 2022
Totolink
A3700R
risk 0.51cvss 7.8epss 0.00
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36464HigAug 25, 2022
Totolink
A3700R
risk 0.51cvss 7.8epss 0.00
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVE-2022-36463HigAug 25, 2022
Totolink
A3700R
risk 0.51cvss 7.8epss 0.00
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36462HigAug 25, 2022
Totolink
A3700R
risk 0.51cvss 7.8epss 0.00
TOTOLINK A3700R V9.1.2u.6134_B20201202 was discovered to contain a stack overflow via the lang parameter in the function setLanguageCfg.