CVE:CVE-2022-26988
CNNVD:CNNVD-202205-2797
TP-Link TL-WDR7660是中国TP-Link有限公司的一款千兆路由器。Mercury D196G是中国Mercury公司的一个无线路由器。
TP-Link TL-WDR7660 2.0.30版本和 Mercury D196G 20200109_2.0.4版本和 Fast FAC1900R 20190827_2.0.2版本存在缓冲区错误漏洞，该漏洞源于 MntAte 函数中存在堆栈溢出问题。本地攻击者可以造成远程代码执行。
solution:Upgrade tp-link tl-wdr7660_firmware to a higher version than 2.0.30,and avoid the version 2.0.30; Upgrade tp-link tl-wdr7661_firmware to a higher version than -; Upgrade tp-link tl-wdr7620_firmware to a higher version than -; Upgrade tp-link tl-wdr5660_firmware to a higher version than -; Upgrade mercusys mercury_d196g_firmware to a higher version than 20200109_2.0.4,and avoid the version 20200109_2.0.4; Upgrade fastcom fac1900r_firmware to a higher version than 20190827_2.0.2,and avoid the version 20190827_2.0.2