PT-2026-57617 · Tenda · Ch22
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Tenda CH22 version 1.0.0.1
Description
A remote buffer overflow occurs when manipulating the
Name argument within the formCertListInfo() function of the '/goform/CertListInfo' endpoint. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially leading to crashes or unauthorized code execution.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
As a temporary workaround, restrict access to the '/goform/CertListInfo' endpoint to minimize the risk of exploitation.
Exploit
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ch22