PT-2026-57617 · Tenda · Ch22

·

CVE-2026-15543

·

Published

2026-07-12

·

Updated

2026-07-13

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Tenda CH22 version 1.0.0.1
Description A remote buffer overflow occurs when manipulating the Name argument within the formCertListInfo() function of the '/goform/CertListInfo' endpoint. A buffer overflow is a condition where a program writes more data to a block of memory than it can hold, potentially leading to crashes or unauthorized code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, restrict access to the '/goform/CertListInfo' endpoint to minimize the risk of exploitation.

Exploit

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2026-09675
CVE-2026-15543

Affected Products

Ch22