PT-2022-3389
CVE-2022-30476
·
تاريخ النشر
2022-03-18
·
تاريخ التحديث
2022-06-03
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Tenda AC Series Router version AC18 V15.03.05.19(6318)
Description
The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router when handling the /goform/SetFirewallCfg request. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations
For version AC18 V15.03.05.19(6318), as a temporary workaround, consider restricting access to the /goform/SetFirewallCfg request in the httpd module until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾