CVE-2022-35217 | BDVDB-2026-181449 Detail

Description#

The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet header length. A local area network attacker with general user privilege can exploit this vulnerability to execute arbitrary code, manipulate system command or disrupt service.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-08-02Record published in the CVE List.
2. Version 22024-09-16Most recent update recorded in the CVE List.