Medium · 5.5 CVE-2022-35219 EUVD-2022-38111GHSA-xgxg-3wg9-5qvg

NHI card’s web service component - Stack-based Buffer Overflow-2

Published Aug 2, 2022 · Updated Sep 16, 2024 · Assigned by twcert

Vendor: NHI Product: card’s web service component

Description

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.

Affected products

Vendor	Product	Affected	Fixed
NHI	card’s web service component	dae0509e5aabde2f110ce8418af67cf7	—

References

https://www.twcert.org.tw/tw/cp-132-6355-3bdab-1.html