PT-2022-24456 · Tenda · Tenda M3
CVE-2022-38562
·
Published
2022-08-28
·
Updated
2022-09-01
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Tenda M3 version 1.0.0.12(4856)
Description
A heap buffer overflow issue was found in the
formSetFixTools function, allowing attackers to cause a Denial of Service (DoS) by exploiting the lan parameter.Recommendations
For Tenda M3 version 1.0.0.12(4856), consider disabling the
formSetFixTools function as a temporary workaround until a patch is available. Restrict access to the lan parameter in the affected function to minimize the risk of exploitation.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda M3