CVE-2022-44258

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter command in the setTracerouteCfg function.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-11-23

Last modified

2025-04-25

Weaknesses

CWE-787

Affected products

• Lr350 Firmware (Totolink)

References

• https://brief-nymphea-813.notion.site/LR350-bof-setTracerouteCfg-cca08814d6b24733ade00b2dae1d4c1a