CVE-2022-37092

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPWifiorLedInfoById.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-370939.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function AddMacList.CVE-2022-370949.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function Edit_BasicSSID_5G.CVE-2022-370959.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateWanParams.CVE-2022-370969.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function EnableIpv6.CVE-2022-370979.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function SetAPInfoById.CVE-2022-370989.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateIpv6Params.CVE-2022-370999.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat.CVE-2022-37102.7A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API controCVE-2022-371009.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone.CVE-2022-371087.2An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage IngesterCVE-2022-371099.8patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to CVE-2022-37114.3A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of S
CVE-2022-37092: Critical severity, CVSS 9.8 | Vulnix