CVE-2022-44257

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter pppoeUser in the setOpModeCfg function.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-11-23

Last modified

2025-04-25

Weaknesses

CWE-787

Affected products

• Lr350 Firmware (Totolink)

References

• https://brief-nymphea-813.notion.site/LR350-bof-setOpModeCfg-9dc3504e403f445b85d5db09176ac406