CVE-2022-29640: High severity totolink a3100r vulnerability

Published May 18, 2022
·
Updated

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a stack overflow via the comment parameter in the function setPortForwardRules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Affected Software

3 affected components
TOTOLINK A3100r Firmware=4.1.2cu.5050_b20200504
TOTOLINK A3100r Firmware=4.1.2cu.5247_b20211129
TOTOLINK A3100R

Event History

May 18, 2022
CVE Published
via MITRE·11:50 AM
Data Sourced
via MITRE·11:50 AM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2022-29640?

CVE-2022-29640 is a vulnerability found in TOTOLINK A3100R V4.1.2cu.5050_B20200504 and V4.1.2cu.5247_B20211129 firmware versions.

2

What is the severity of CVE-2022-29640?

The severity of CVE-2022-29640 is high with a CVSS score of 7.5.

3

How does CVE-2022-29640 affect TOTOLINK A3100R firmware?

CVE-2022-29640 affects TOTOLINK A3100R firmware versions 4.1.2cu.5050_B20200504 and 4.1.2cu.5247_B20211129.

4

What is the impact of CVE-2022-29640?

CVE-2022-29640 allows attackers to cause a Denial of Service (DoS) by exploiting a stack overflow vulnerability in the setPortForwardRules function.

5

How can I mitigate CVE-2022-29640?

Apply the latest firmware update provided by the vendor to mitigate the CVE-2022-29640 vulnerability.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203