cve/2022/CVE-2022-3228.md

### [CVE-2022-3228](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3228)
![](https://img.shields.io/static/v1?label=Product&message=H0-ECOM100%20Communications%20Module&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=All%20versions%3C%3D%20Firmware%20v5.0.155%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-121%20Stack-based%20Buffer%20Overflow&color=brighgreen)

### Description

Using custom code, an attacker can write into name or description fields larger than the appropriate buffer size causing a stack-based buffer overflow on Host Engineering H0-ECOM100 Communications Module Firmware versions v5.0.155 and prior. This may allow an attacker to crash the affected device or cause it to become unresponsive.

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/karimhabush/cyberowl