CVE-2022-24143

Name of the Vulnerable Software and Affected Versions Tenda AX3 version 16.03.12.10 CN Tenda AX12 version 22.03.01.2 CN

Description A stack overflow was discovered in the form fast setting wifi set function, allowing attackers to cause a Denial of Service (DoS) via the timeZone parameter.

Recommendations For Tenda AX3 version 16.03.12.10 CN, consider disabling the form fast setting wifi set function until a patch is available. For Tenda AX12 version 22.03.01.2 CN, restrict access to the timeZone parameter in the affected API endpoint until the issue is resolved. Avoid using the timeZone parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.