PT-2022-16493
CVE-2022-24143
·
تاريخ النشر
2022-02-04
·
تاريخ التحديث
2022-03-01
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Tenda AX3 version 16.03.12.10 CN
Tenda AX12 version 22.03.01.2 CN
Description
A stack overflow was discovered in the
form fast setting wifi set function, allowing attackers to cause a Denial of Service (DoS) via the timeZone parameter.Recommendations
For Tenda AX3 version 16.03.12.10 CN, consider disabling the
form fast setting wifi set function until a patch is available.
For Tenda AX12 version 22.03.01.2 CN, restrict access to the timeZone parameter in the affected API endpoint until the issue is resolved.
Avoid using the timeZone parameter in the affected API endpoint until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾