CVE-2022-35219

Publication date

2022-08-02 15:20:19

Family

twcert

State

PUBLISHED

Description

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.