CVE-2022-29393: Critical severity totolink n600r vulnerability
TOTOLINK N600R V4.3.0cu.7647B20210106 was discovered to contain a stack overflow via the comment parameter in the function FUN004192cc.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29393?
The severity of CVE-2022-29393 is critical with a CVSS score of 9.8.
How does CVE-2022-29393 affect TOTOLINK N600R firmware version 4.3.0cu.7647_b20210106?
TOTOLINK N600R firmware version 4.3.0cu.7647_b20210106 is affected by CVE-2022-29393, which exposes a stack overflow vulnerability through the comment parameter in the function FUN_004192cc.
Is TOTOLINK N600R vulnerable to CVE-2022-29393?
No, TOTOLINK N600R is not vulnerable to CVE-2022-29393.
How can I fix the stack overflow vulnerability in TOTOLINK N600R firmware version 4.3.0cu.7647_b20210106?
To fix the stack overflow vulnerability in TOTOLINK N600R firmware version 4.3.0cu.7647_b20210106, it is recommended to update to a patched version provided by the vendor.
Where can I find more information about CVE-2022-29393?
You can find more information about CVE-2022-29393 at the following reference: https://github.com/d1tto/IoT-vuln/tree/main/Totolink/3.setIpQosRules