CVE:CVE-2022-26987
CNNVD:CNNVD-202205-2798
TP-Link TL-WDR7660是中国等都是中国普联技术(TP-Link)有限公司的产品。TP-Link TL-WDR7660是一款千兆路由器。Mercury D196G等都是中国深圳市美科星通信技术(Mercury)公司的产品。Mercury D196G是一个无线路由器。Fast FAC1900R等都是中国深圳市迅捷通信技术(Fast)有限公司的产品。Fast FAC1900R是一款无线路由器。
TP-Link TL-WDR7660 2.0.30版本和 Mercury D196G 20200109_2.0.4版本和 Fast FAC1900R 20190827_2.0.2版本存在缓冲区错误漏洞，该漏洞源于 MmtAtePrase 函数中存在堆栈溢出问题。本地攻击者可以造成远程代码执行。
solution:Upgrade tp-link tl-wdr7660_firmware to a higher version than 2.0.30,and avoid the version 2.0.30; Upgrade tp-link tl-wdr7661_firmware to a higher version than -; Upgrade tp-link tl-wdr7620_firmware to a higher version than -; Upgrade tp-link tl-wdr5660_firmware to a higher version than -; Upgrade mercusys mercury_d196g_firmware to a higher version than 20200109_2.0.4,and avoid the version 20200109_2.0.4; Upgrade fastcom fac1900r_firmware to a higher version than 20190827_2.0.2,and avoid the version 20190827_2.0.2