Security Advisory
CVE-2022-28664
9.8
CRITICAL
Vulnerability Description
A memory corruption vulnerability exists in the httpd unescape functionality of FreshTomato 2022.1. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.The `freshtomato-mips` has a vulnerable URL-decoding feature that can lead to memory corruption.
Published Date
August 5, 2022
Official Source
NIST NVD Advisory