CVE-2022-44259

TOTOLINK LR350 V9.3.5u.6369_B20220309 contains a post-authentication buffer overflow via parameter week, sTime, and eTime in the setParentalRules function.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-11-23

Last modified

2025-04-25

Weaknesses

CWE-787

Affected products

• Lr350 Firmware (Totolink)

References

• https://brief-nymphea-813.notion.site/LR350-bof-setParentalRules-fe0c0cc8b9bd44b48c527f76e69d402a