CVE-2024-10750CWE-476

Tenda i22 SysToo websReadEvent null pointer dereference

High · published November 4, 2024

CVSS v4.0
7.1
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

A vulnerability has been found in Tenda i22 1.0.0.3(4687) and classified as problematic. Affected by this vulnerability is the function websReadEvent of the file /goform/GetIPTV?fgHPOST/goform/SysToo. The manipulation of the argument Content-Length leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

The record
Technical detail
CVSS v4.0
7.1 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00879 · 58.7th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2024-11-04T01:00Z
EPSS history
Timeline
  • 04 NOV 01:00Z
    Tenda i22 SysToo websReadEvent null pointer dereference
    cvelistv5