CVE-2022-44256

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter lang in the setLanguageCfg function.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-11-23

Last modified

2025-04-25

Weaknesses

CWE-787

Affected products

• Nr1800x Firmware (Totolink)

References

• https://brief-nymphea-813.notion.site/LR350-bof-setLanguageCfg-ddd638b9bb2d4c72b8dba5125c293141