PT-2022-24457 · Tenda · Tenda M3
CVE-2022-38563
·
Published
2022-08-28
·
Updated
2022-09-01
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Tenda M3 version 1.0.0.12(4856)
Description
A heap buffer overflow issue was found in the function formSetFixTools, allowing attackers to cause a Denial of Service (DoS) via the
MACAddr parameter.Recommendations
For Tenda M3 version 1.0.0.12(4856), consider disabling the formSetFixTools function as a temporary workaround until a patch is available. Restrict access to the
MACAddr parameter in the affected function to minimize the risk of exploitation.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda M3