PT-2022-24099

CVE-2022-37820

·

Published

2022-08-25

·

Updated

2022-08-27

Description by

CVSS 3.1
7.8
High
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Tenda AX1803 version 1.0.0.1
Description A stack overflow issue was discovered via the ddnsEn parameter in the formSetSysToolDDNS function.
Recommendations For Tenda AX1803 version 1.0.0.1, consider disabling the formSetSysToolDDNS function or restricting access to the ddnsEn parameter until a patch is available.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-787: Out-of-bounds Write
Related identifiers
CVE-2022-37820
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com