CVE-2022-1669

A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary (index.cgi) to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Address" value and it would be copied to a second variable with a "strcpy" vulnerable function without checking its length. Because of this, it is possible to send a long address value to overflow the process stack, controlling the function return address.

• CWE-121

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-137-01Third Party Advisory, US Government Resource
• https://www.cisa.gov/uscert/ics/advisories/icsa-22-137-01Third Party Advisory, US Government Resource

Published

May 24, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-1663The Stop Spam Comments WordPress plugin through 0.2.1.2 does…6.5
• CVE-2022-1664Dpkg::Source::Archive in dpkg, the Debian package management…9.8
• CVE-2022-1665A set of pre-production kernel packages of Red Hat Enterpris…8.2
• CVE-2022-1666The default password for the web application’s root user (th…6.5
• CVE-2022-1667Client-side JavaScript controls may be bypassed by directly …7.5
• CVE-2022-1668Weak default root user credentials allow remote attackers to…9.8
• CVE-2022-1670When generating a user invitation code in Octopus Server, th…7.5
• CVE-2022-1671A NULL pointer dereference flaw was found in rxrpc_preparse_…7.1
• CVE-2022-1672The Insights from Google PageSpeed WordPress plugin before 4…8.8
• CVE-2022-1673The WooCommerce Green Wallet Gateway WordPress plugin before…6.1
• CVE-2022-1674NULL Pointer Dereference in function vim_regexec_string at r…5.5
• CVE-2022-1676Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…