PT-2022-24458 · Tenda · Tenda M3
CVE-2022-38564
·
Published
2022-08-28
·
Updated
2022-09-01
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Tenda M3 version 1.0.0.12(4856)
Description
A buffer overflow issue was found in the
formSetPicListItem function, allowing attackers to cause a Denial of Service (DoS) by exploiting the adItemUID parameter.Recommendations
For Tenda M3 version 1.0.0.12(4856), as a temporary workaround, consider disabling the
formSetPicListItem function until a patch is available. Restrict access to the adItemUID parameter to minimize the risk of exploitation.Exploit
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tenda M3