CVE-2022-25678CWE-120

Buffer Copy Without Checking Size of Input in MODEM

Critical · published April 4, 2023

CVSS v3.1
9.8
EPSS
0%
Percentile
34.9
In the wild
Unconfirmed
What it is

🔥 A sneaky buffer overwrite in your modem could lead to absolute chaos! Think of your modem like a busy post office. If one mail carrier starts jamming letters into the wrong slots, the entire system can break down, causing delays and lost packages! An attacker exploiting this vulnerability could potentially crash the modem, leading to a complete loss of service. In a world where connectivity is key, this could mean interrupted communications and chaos in your smart home or business!

Put simply

Think of your modem like a busy post office. If one mail carrier starts jamming letters into the wrong slots, the entire system can break down, causing delays and lost packages! CVE-2022-25678 arises from a memory correction issue during a CoAP connection, where a buffer overwrite can occur, potentially allowing malicious code execution.

What to do

An attacker exploiting this vulnerability could potentially crash the modem, leading to a complete loss of service. In a world where connectivity is key, this could mean interrupted communications and chaos in your smart home or business! Immediately update your modem's firmware to the patched version if available. If you're not sure, check with your modem's manufacturer to ensure your device is secure. Stay vigilant and monitor for any updates! You've got this! With a little proactive protection, you can keep your network safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00417 · 34.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2023-04-04T04:46Z
EPSS history
Timeline
  • 04 APR 04:46Z
    Buffer Copy Without Checking Size of Input in MODEM
    cvelistv5