PT-2022-23478 · Tenda · Tenda Ac9
CVE-2022-36571
·
Published
2022-08-31
·
Updated
2022-09-02
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Tenda AC9 version 15.03.05.19
Description
A stack overflow issue was discovered, which can be triggered via the
mask parameter at the "/goform/WanParameterSetting" API endpoint.Recommendations
For Tenda AC9 version 15.03.05.19, avoid using the
mask parameter in the "/goform/WanParameterSetting" API endpoint until a fix is available. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda Ac9