Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-26988

TP-Link TL-WDR7660 2.0.30, Mercury D196G 20200109_2.0.4, and Fast FAC1900R 20190827_2.0.2 routers have a stack overflow issue in `MntAte` function. Local users could get remote code execution.

Published

2022-05-10T15:15:07.587

Last Modified

2024-11-21T06:54:55.060

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-787
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System tp-link tl-wdr7660_firmware 2.0.30 Yes
Hardware tp-link tl-wdr7660 - No
Operating System tp-link tl-wdr7661_firmware - Yes
Hardware tp-link tl-wdr7661 - No
Operating System tp-link tl-wdr7620_firmware - Yes
Hardware tp-link tl-wdr7620 - No
Operating System tp-link tl-wdr5660_firmware - Yes
Hardware tp-link tl-wdr5660 - No
Operating System mercusys mercury_d196g_firmware 20200109_2.0.4 Yes
Hardware mercusys mercury_d196g - No
Operating System fastcom fac1900r_firmware 20190827_2.0.2 Yes
Hardware fastcom fac1900r - No
References