CVE-2022-28556

Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow

published May 4, 2022

CVSS
—
EPSS
1%
Percentile
64.1
In the wild
Unconfirmed
What it is

Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow. Similarly, this vulnerability can be used together with CVE-2021-44971

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01055 · 64.1th percentile
Published
2022-05-04T15:13Z
EPSS history
Timeline
  • 04 MAY 15:13Z
    Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow
    cvelistv5