CVE-2022-3228 Memory corruption in H0-ECOM100 Communications Module
An attacker can cause a stack-based buffer overflow in Host Engineering H0-ECOM100 firmware, leading to device crashes or unresponsiveness.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-3228?
CVE-2022-3228 is a medium-severity memory corruption vulnerability in Host Engineering H0-ECOM100 Communications Module, published on 28 Oct 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffer overflow on Host Engineering H0-ECOM100 Communications Module Firmware versions v5.0.155 and prior. This may allow an attacker to crash the affected device or cause it to become unresponsive.
Which versions are affected by CVE-2022-3228?
It affects 1 product.
Products include Hosteng H0-Ecom100 Firmware.
How do I fix CVE-2022-3228?
No fix has been published for CVE-2022-3228 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2022-3228 being exploited?
There is no known exploitation of CVE-2022-3228 in the wild and no public exploit code.
Other vulnerabilities in Host Engineering H0-ECOM100 Communications Module
Sources
Also known as GHSA-cqc5-vhj7-6mrq.