Vulnerability · Published Mar 4, 2022 · Assigned by mitre

CVE-2022-25106

Medium 5.5

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 8.6% (higher than 95% of all known vulnerabilities).

Severity (CVSS NVD)5.5Medium

Exploit odds (30 days)8.6%top 4.9% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

D-Link DIR-859 v1.05 was discovered to contain a stack-based buffer overflow via the function genacgi_main. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted payload.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://www.dlink.com/en/security-bulletin/ x_refsource_MISC
https://github.com/chunklhit/cve/blob/master/dlink/DIR859/BufferOverflow.md x_refsource_MISC
https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10267 x_refsource_MISC