CVE-2022-27631

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-08-05 · updated 2026-06-17
Weakness: CWE-787

Description

A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability.

Affected products

DD-WRT: from 32270 through 48599

References

https://talosintelligence.com/vulnerability_reports/TALOS-2022-1510
https://talosintelligence.com/vulnerability_reports/TALOS-2022-1510

Get alerted when CVE-2022-27631 or the next vulnerability affects your stack