CVE-2022-27255

CRITICO 9.8CVE-2022-27255 · Published 01/08/2022 · updated 17/06/2026

In breve

CVE-2022-27255 è una vulnerabilità CRITICO (CVSS 9.8).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 36.7%, superiore al 98.5% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.

References

forum.defcon.org/node/241835 · Third Party Advisory
realtek.com/images/safe-report/Realtek_APRouter_SDK_Advisory-CVE-2022-27255.pdf · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free