medium5.5
CVE-2022-35218
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length.
Impact
The NHI card’s web service component has a heap-based buffer overflow vulnerability due to insufficient validation for packet origin parameter length. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nhi | Health Insurance Web Service Component | All versions |