medium5.5
CVE-2022-35219
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter.
Impact
The NHI card’s web service component has a stack-based buffer overflow vulnerability due to insufficient validation for network packet key parameter. A LAN attacker with general user privilege can exploit this vulnerability to disrupt service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nhi | Health Insurance Web Service Component | All versions |