PT-2023-15587
CVE-2022-48130
·
تاريخ النشر
2022-12-25
·
تاريخ التحديث
2025-03-26
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Tenda W20E version 15.11.0.6
Description
The issue concerns multiple stack overflows in the function formSetStaticRoute, which can be triggered via the parameters
staticRouteNet, staticRouteMask, staticRouteGateway, and staticRouteWAN.Recommendations
For Tenda W20E version 15.11.0.6, consider disabling the formSetStaticRoute function until a patch is available to prevent potential exploitation. Restrict access to the parameters
staticRouteNet, staticRouteMask, staticRouteGateway, and staticRouteWAN to minimize the risk of stack overflows. At the moment, there is no information about a newer version that contains a fix for this issue. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾