PT-2022-17361
CVE-2022-25553
·
تاريخ النشر
2022-03-09
·
تاريخ التحديث
2022-03-12
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
Tenda AX1806 version 1.0.0.1
Description
A stack overflow was discovered in the function formSetSysToolDDNS, allowing attackers to cause a Denial of Service (DoS) via the
ddnsPwd parameter.Recommendations
For Tenda AX1806 version 1.0.0.1, consider disabling the formSetSysToolDDNS function as a temporary workaround until a patch is available. Avoid using the
ddnsPwd parameter in the affected API endpoint until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾