CWE-787

Out-of-bounds Write

BaseDraftLikelihood: High

Description

The product writes data past the end, or before the beginning, of the intended buffer.

Hierarchy (View 1000)

Parents

CWE-119

Children

CVEs mapped to this weakness (15,183)

page 387 of 760

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2022-36494	—	Hig	0.51	7.8	0.01	Aug 25, 2022	H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist.
CVE-2022-36493	—	Hig	0.51	7.8	0.01	Aug 25, 2022	H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
CVE-2022-36492	—	Hig	0.51	7.8	0.01	Aug 25, 2022	H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList.
CVE-2022-36491	—	Hig	0.51	7.8	0.01	Aug 25, 2022	H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params.
CVE-2022-36490	—	Hig	0.51	7.8	0.01	Aug 25, 2022	H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList.
CVE-2022-36489	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6.
CVE-2022-36488	Totolink N350R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVE-2022-36484	Totolink N350R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
CVE-2022-36483	Totolink N350R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36482	Totolink N350R	Hig	0.51	7.8	0.01	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
CVE-2022-36480	Totolink N350R	Hig	0.51	7.8	0.00	Aug 25, 2022	TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36478	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID.
CVE-2022-36477	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList.
CVE-2022-36475	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList.
CVE-2022-36474	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet.
CVE-2022-36473	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVE-2022-36472	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
CVE-2022-36471	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode.
CVE-2022-36470	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById.
CVE-2022-36469	—	Hig	0.51	7.8	0.00	Aug 25, 2022	H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.

CVE-2022-36494HigAug 25, 2022
risk 0.51cvss 7.8epss 0.01
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function edditactionlist.
CVE-2022-36493HigAug 25, 2022
risk 0.51cvss 7.8epss 0.01
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.
CVE-2022-36492HigAug 25, 2022
risk 0.51cvss 7.8epss 0.01
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function AddMacList.
CVE-2022-36491HigAug 25, 2022
risk 0.51cvss 7.8epss 0.01
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function UpdateIpv6Params.
CVE-2022-36490HigAug 25, 2022
risk 0.51cvss 7.8epss 0.01
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EditMacList.
CVE-2022-36489HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C Magic NX18 Plus NX18PV100R003 was discovered to contain a stack overflow via the function EnableIpv6.
CVE-2022-36488HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.00
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the sPort parameter in the function setIpPortFilterRules.
CVE-2022-36484HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.00
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the function setDiagnosisCfg.
CVE-2022-36483HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.00
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the pppoeUser parameter.
CVE-2022-36482HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.01
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a command injection vulnerability via the lang parameter in the function setLanguageCfg.
CVE-2022-36480HigAug 25, 2022
Totolink
N350R
risk 0.51cvss 7.8epss 0.00
TOTOLINK N350RT V9.3.5u.6139_B20201216 was discovered to contain a stack overflow via the command parameter in the function setTracerouteCfg.
CVE-2022-36478HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID.
CVE-2022-36477HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddWlanMacList.
CVE-2022-36475HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function AddMacList.
CVE-2022-36474HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function WlanWpsSet.
CVE-2022-36473HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.
CVE-2022-36472HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMobileAPInfoById.
CVE-2022-36471HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetMacAccessMode.
CVE-2022-36470HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAP5GWifiById.
CVE-2022-36469HigAug 25, 2022
risk 0.51cvss 7.8epss 0.00
H3C B5 Mini B5MiniV100R005 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.