Classic Buffer Overflow — CVEs by weakness type

Rax40 Firmware CRITICAL 9.8

CVE-2022-48196

Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, …

Fix: 1.0.2.60 / 1.0.4.122+

Fix from $2,300 2022-12-30

Xstream HIGH 7.5

CVE-2022-41966EPSS 9%

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack…

Fix: 1.4.20+

Fix from $1,950 2022-12-28

Aleos CRITICAL 9.8

CVE-2019-11851

The ACENet service in Sierra Wireless ALEOS before 4.4.9, 4.5.x through 4.9.x before 4.9.5, and 4.10.x through 4.13.x before 4.14.0 allows remote att…

Fix: 4.4.9 / 4.9.5+

Fix from $2,300 2022-12-26

Animal Crossing\ CRITICAL 9.8

CVE-2022-47949EPSS 17%

The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitr…

Fix: 1.2 / 2.0.6+

Fix from $2,300 2022-12-24

M50 Firmware CRITICAL 9.8

CVE-2022-45715

IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pLanPortRange and pWanPortRange parameters in the formSetPo…

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45716

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formIPMacBindDel function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45718

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formIPMacBindAdd function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45719

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the gotoUrl parameter in the formPortalAuth function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45720

IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the ip, mac, and remark parameters in the formIPMacBindModify f…

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45721

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the picName parameter in the formDelWewifiPic function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45706

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the hostname parameter in the formSetNetCheckTools function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45707

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsHijack function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45708

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the sPortMapIndex parameter in the formDelPortMapping function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45710

IP-COM M50 V15.11.0.33(10768) was discovered to contain multiple buffer overflows via the pEnable, pLevel, and pModule parameters in the formSetDebug…

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45712

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the rules parameter in the formAddDnsForward function.

Mitigation only

Fix from $2,300 2022-12-23

M50 Firmware CRITICAL 9.8

CVE-2022-45714

IP-COM M50 V15.11.0.33(10768) was discovered to contain a buffer overflow via the indexSet parameter in the formQOSRuleDel function.

Mitigation only

Fix from $2,300 2022-12-23

F1203 Firmware HIGH 7.5

CVE-2022-46550

Tenda F1203 V2.0.1.6 was discovered to contain a buffer overflow via the urls parameter at /goform/saveParentControlInfo.

No fix yet