CVE-2022-29861:
A stack overflow vulnerability in the parsing of HTTP requests to the device management web server. This vulnerability can be exploited over the network and lead to remote code execution with no user interaction.
Score
A numerical rating that indicates how dangerous this vulnerability is.
9.8CriticalA numerical rating that indicates how dangerous this vulnerability is.
- Published Date:May 1, 2022
- CISA KEV Date:*No Data*
- Industries Affected:20
Exploitability
- Attack Vector:NETWORK
- Attack Complexity:LOW
- Privileges Required:NONE
- User Interaction:NONE
- Scope:UNCHANGED
Impact
- Confidentiality Impact:HIGH
- Integrity Impact:HIGH
- Availability Impact:HIGH
Description Preview
A stack overflow vulnerability in the parsing of HTTP requests to the device management web server. This vulnerability can be exploited over the network and lead to remote code execution with no user interaction.
Industries Affected
Below is a list of industries most commonly impacted or potentially at risk based on intelligence.
Low
