CVE-2022-35268 MEDIUM

CVE-2022-35268

Vendor Robustel
Product R1510
Weakness CWE-125
Published October 25, 2022
Last update April 15, 2025
View on NVD All CVEs

CVSS base score

4.9/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A denial of service vulnerability exists in the web_server hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the `/action/import_sdk_file/` API.

Key dates

02Disclosure timeline

October 25, 2022 CVE published
April 15, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-45052 Adobe Bridge TIF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2022-28253 Adobe Acrobat Reader DC Annotation Out-Of-Bounds Read Information Disclosure Vulnerability CVE-2023-1544 Qemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read() CVE-2024-11565 IrfanView CGM File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability CVE-2020-24434 Acrobat Pro DC Out-Of-Bounds Read Vulnerability Could Lead to Information Disclosure