Read the docs
TI-2022-19570 Aliases CVE-2022-41029GHSA-v33c-xwpv-wv8v

Buffer overflow in Siretta QUARTZ-GOLD

Priority HIGH 67CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210720-141020. A specially-crafted network packet can lead to arbitrary command execution. An attacker can send a sequence of requests to trigger these vulnerabilities.This buffer overflow is in the function that manages the 'wlan filter mac address WORD descript WORD' command template.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.02302 83rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SirettaQUARTZ-GOLDG5.0.1.5-210720-141020—No fix listedCNA
  • QUARTZ-GOLD VendorSiretta Affected G5.0.1.5-210720-141020 Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:siretta:quartz-gold_firmware:g5.0.1.5-210720-141020:*:*:*:*:*:*:*g5.0.1.5-210720-141020VulnerableSiretta
cpe:2.3:h:siretta:quartz-gold:-:*:*:*:*:*:*:*not specified by NVDRunning onSiretta
  • cpe:2.3:o:siretta:quartz-gold_firmware:g5.0.1.5-210720-141020:*:*:*:*:*:*:* Versions g5.0.1.5-210720-141020 Vulnerable ·Siretta
  • cpe:2.3:h:siretta:quartz-gold:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Siretta

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-41029
  2. 2026-10-03 Alias added: GHSA-v33c-xwpv-wv8v

References

Exploit 1

  • TI-2022-20331 Heap-based buffer overflow in Siretta QUARTZ-GOLD CVSS 3.1CRITICAL 9.8
  • TI-2022-20679 OS command injection in FreshTomato CVSS 3.1CRITICAL 9.8
  • TI-2022-19571 Buffer overflow in Siretta QUARTZ-GOLD CVSS 3.1CRITICAL 9.8
  • TI-2022-19560 Buffer overflow in Siretta QUARTZ-GOLD CVSS 3.1CRITICAL 9.8
  • TI-2022-19559 Buffer overflow in Siretta QUARTZ-GOLD CVSS 3.1CRITICAL 9.8
  • TI-2022-19558 Buffer overflow in Siretta QUARTZ-GOLD CVSS 3.1CRITICAL 9.8
See all 63 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences