CVE-2022-27631 - CVE House
Back to Database
Status published Medium CVE-2022-27631

A memory corruption vulnerability exists in the httpd unescape functionality...

Vulnerability Description

A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-27631

Credits & Attribution

No credits recorded in the NVD database.

References

More from DD-WRT

View All →
CVE-2021-27137
An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724....
High 8.1

Affected Vendor

Affected Software

DD-WRT
Vulnerable Versions:
Revision 32270 - Revision 48599

Timeline

Official Publish: August 5th, 2022
Last Modified: April 15th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weaknesses (CWE)

CWE-787

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control
T1485 Data Destruction
Impact