Sign-up

ID

VAR-202209-0410


CVE

CVE-2022-40110


TITLE

TOTOLINK  of  A3002R  Classic buffer overflow vulnerability in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2022-015274

DESCRIPTION

TOTOLINK A3002R TOTOLINK-A3002R-He-V1.1.1-B20200824.0128 is vulnerable to Buffer Overflow via /bin/boa. TOTOLINK of A3002R Firmware has a classic buffer overflow vulnerability.Service operation interruption (DoS) It may be in a state

Trust: 1.62

sources: NVD: CVE-2022-40110 // JVNDB: JVNDB-2022-015274

AFFECTED PRODUCTS

vendor:totolinkmodel:a3002rscope:eqversion:1.1.1-b20200824.0128

Trust: 1.0

vendor:totolinkmodel:a3002rscope: - version: -

Trust: 0.8

vendor:totolinkmodel:a3002rscope:eqversion:a3002r firmware 1.1.1-b20200824.0128

Trust: 0.8

vendor:totolinkmodel:a3002rscope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2022-015274 // NVD: CVE-2022-40110

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2022-40110
value: HIGH

Trust: 1.8

CNNVD: CNNVD-202209-362
value: HIGH

Trust: 0.6

NVD:
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2022-40110
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: JVNDB: JVNDB-2022-015274 // NVD: CVE-2022-40110 // CNNVD: CNNVD-202209-362

PROBLEMTYPE DATA

problemtype:CWE-120

Trust: 1.0

problemtype:Classic buffer overflow (CWE-120) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2022-015274 // NVD: CVE-2022-40110

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202209-362

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202209-362

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2022-40110

EXTERNAL IDS
db:NVDid:CVE-2022-40110
Trust: 3.2
db:JVNDBid:JVNDB-2022-015274
Trust: 0.8
db:CNNVDid:CNNVD-202209-362
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2022-015274 // 
            
            
            
            NVD: CVE-2022-40110 // 
            
            
            
            CNNVD: CNNVD-202209-362

REFERENCES
url:https://github.com/1759134370/iot/blob/main/totolink/a3002r/2.md
Trust: 1.6
url:https://nvd.nist.gov/vuln/detail/cve-2022-40110
Trust: 0.8
url:https://cxsecurity.com/cveshow/cve-2022-40110/
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2022-015274 // 
            
            
            
            NVD: CVE-2022-40110 // 
            
            
            
            CNNVD: CNNVD-202209-362

SOURCES
db:JVNDBid:JVNDB-2022-015274
db:NVDid:CVE-2022-40110
db:CNNVDid:CNNVD-202209-362

LAST UPDATE DATE
2023-12-18T13:22:12.526000+00:00

SOURCES UPDATE DATE
db:JVNDBid:JVNDB-2022-015274date:2023-09-26T07:00:00
db:NVDid:CVE-2022-40110date:2022-09-08T21:24:42.683
db:CNNVDid:CNNVD-202209-362date:2022-09-09T00:00:00

SOURCES RELEASE DATE
db:JVNDBid:JVNDB-2022-015274date:2023-09-26T00:00:00
db:NVDid:CVE-2022-40110date:2022-09-06T17:15:08.587
db:CNNVDid:CNNVD-202209-362date:2022-09-06T00:00:00