CVE-2022-40988 - CVE House
Back to Database
Status published High CVE-2022-40988

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command...

Vulnerability Description

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'ipv6 static dns WORD WORD WORD' command template.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40988

Credits & Attribution

No credits recorded in the NVD database.

References

More from Siretta

View All →
CVE-2022-42493
Several OS command injection vulnerabilities exist in the m2m binary...
Critical 9.8
CVE-2022-42492
Several OS command injection vulnerabilities exist in the m2m binary...
Critical 9.8
CVE-2022-42491
Several OS command injection vulnerabilities exist in the m2m binary...
Critical 9.8
CVE-2022-42490
Several OS command injection vulnerabilities exist in the m2m binary...
Critical 9.8
CVE-2022-41991
A heap-based buffer overflow vulnerability exists in the m2m DELETE_FILE...
Critical 9.8

Affected Vendor

Affected Software

QUARTZ-GOLD
Vulnerable Versions:
G5.0.1.5-210720-141020

Timeline

Official Publish: January 26th, 2023
Last Modified: November 4th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-120

MITRE ATT&CK TTPs

T1203 Exploitation for Client Execution
Execution
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1055 Process Injection
Defense Evasion
T1105 Ingress Tool Transfer
Command and Control