CVE Feed

    Dashboard / CVE / CVE-2022-37840

    CVE-2022-37840

    In TOTOLINK A860R V4.1.2cu.5182_B20201027, the main function in downloadfile.cgi has a buffer overflow vulnerability.

    Published:Sep 6, 2022
    Last Modified:Nov 21, 2024
    EPS:Sep 6, 2022
    EPSS Score:0.00486
    CVSS Score:9.8

    Affected Products

    Vendor
    Totolink
    Product
    A860r
    Vendor
    Totolink
    Product
    A860r Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2022-40475 (CVSS 9.8) — TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection via the component /cgi-bi…
    CVE-2022-37842 (CVSS 9.8) — In TOTOLINK A860R V4.1.2cu.5182_B20201027, the parameters in infostat.cgi are not filtered, causing a buffer o…
    CVE-2022-37841 (CVSS 7.5) — In TOTOLINK A860R V4.1.2cu.5182_B20201027 there is a hard coded password for root in /etc/shadow.sample.…
    CVE-2022-37839 (CVSS 9.8) — TOTOLINK A860R V4.1.2cu.5182_B20201027 is vulnerable to Buffer Overflow via Cstecgi.cgi.…
    CVE-2022-37843 (CVSS 9.8) — In TOTOLINK A860R V4.1.2cu.5182_B20201027 in cstecgi.cgi, the acquired parameters are directly put into the sy…
    CVE-2022-36614 (CVSS 7.8) — TOTOLINK A860R V4.1.2cu.5182_B20201027 was discovered to contain a hardcoded password for root at /etc/shadow.…
    CVE-2022-25083 (CVSS 9.8) — TOTOLink A860R V4.1.2cu.5182_B20201027 was discovered to contain a command injection vulnerability in the "Mai…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High