CVE-2022-1669 - CVE House
Back to Database
Status published Medium CVE-2022-1669

Circutor COMPACT DC-S BASIC

Vulnerability Description

A buffer overflow vulnerability has been detected in the firewall function of the device management web portal. The device runs a CGI binary (index.cgi) to offer a management web application. Once authenticated with valid credentials in this web portal, a potential attacker could submit any "Address" value and it would be copied to a second variable with a "strcpy" vulnerable function without checking its length. Because of this, it is possible to send a long address value to overflow the process stack, controlling the function return address.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-1669

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Angel Garcia Moreno reported this vulnerability to CISA.

References

More from CIRCUTOR

View All →
CVE-2024-8892
Uncontrolled Resource Consumption vulnerability on CIRCUTOR TCP2RS+
Medium 5.3
CVE-2024-8891
Exposure of Private Personal Information to an Unauthorized Actor vulnerability on CIRCUTOR Q-SMT
Medium 5.3
CVE-2024-8890
Insertion of Sensitive Information Into Sent Data vulnerability on CIRCUTOR Q-SMT
High 8
CVE-2024-8889
Improper Input Validation vulnerability on CIRCUTOR TCP2RS+
Critical 9.3
CVE-2024-8888
Insufficient Session Expiration vulnerability on CIRCUTOR Q-SMT
Critical 10

Affected Vendor

Affected Software

COMPACT DC-S BASIC
Vulnerable Versions:
CIR_CDC_v1.2.17

Timeline

Official Publish: May 24th, 2022
Last Modified: April 16th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)

CWE-121

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control
T1485 Data Destruction
Impact