CVE-2022-44199

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Netgear R7000P V1.3.1.64 is vulnerable to Buffer Overflow via parameter openvpn_server_ip.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Nov 22, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-442009.8Netgear R7000P V1.3.0.8, V1.3.1.64 is vulnerable to Buffer Overflow via parameters: stamode_dns1_pri and stamode_dns1_sec.CVE-2022-442019.8D-Link DIR823G 1.02B05 is vulnerable to Commad Injection.CVE-2022-442029.8D-Link DIR878 1.02B04 and 1.02B05 are vulnerable to Buffer Overflow.CVE-2022-442049.8D-Link DIR3060 DIR3060A1_FW111B04.bin is vulnerable to Buffer Overflow.CVE-2022-44216.1A vulnerability was found in rAthena FluxCP. It has been classified as problematic. Affected is an unknown function of the file themes/defauCVE-2022-442117.4In GL.iNet Goodcloud 1.1 Incorrect access control allows a remote attacker to access/change devices' settings.CVE-2022-442125.9In GL.iNet Goodcloud 1.0, insecure design allows remote attacker to access devices' admin panel.CVE-2022-442134.8ZKTeco Xiamen Information Technology ZKBio ECO ADMS <=3.1-164 is vulnerable to Cross Site Scripting (XSS).CVE-2022-442156.1There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL.CVE-2022-442167.5Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users without knowing victim's originCVE-2022-44229.8Call Center System developed by Bulutses Information Technologies before version 3.0 has an unauthenticated Sql Injection vulnerability. ThiCVE-2022-442327.5libming 0.4.8 0.4.8 is vulnerable to Buffer Overflow. In getInt() in decompile.c unknown type may lead to denial of service. This is a diffe
CVE-2022-44199: Critical severity, CVSS 9.8 | Vulnix