First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-37099

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateSnat.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Aug 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-37102.7A post-auth read-only SQL injection vulnerability allows API clients to read non-sensitive configuration database contents in the API contro CVE-2022-371009.8H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone.CVE-2022-371087.2An injection vulnerability in the syslog-ng configuration wizard in Securonix Snypr 6.4 allows an application user with the "Manage Ingester CVE-2022-371099.8patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to CVE-2022-37114.3A post-auth read-only SQL injection vulnerability allows users to read non-sensitive configuration database contents in the User Portal of S CVE-2022-371119.8BlueCMS 1.6 has SQL injection in line 132 of admin/article.php CVE-2022-371129.8BlueCMS 1.6 has SQL injection in line 55 of admin/model.php CVE-2022-371139.8Bluecms 1.6 has SQL injection in line 132 of admin/area.php CVE-2022-371227.5Carel pCOWeb HVAC BACnet Gateway 2.1.0, Firmware: A2.1.0 - B2.1.0, Application Software: 2.15.4A Software v16 13020200 suffers from an unaut CVE-2022-371238.8D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/form2userconfig.cgi.CVE-2022-371259.8D-link DIR-816 A2_v1.10CNB04.img is vulnerable to Command injection via /goform/NTPSyncWithHost.CVE-2022-371289.8In D-Link DIR-816 A2_v1.10CNB04.img the network can be initialized without authentication via /goform/wizard_end.

CVE-2022-37099: Critical severity, CVSS 9.8 | Vulnix