CVE-2022-40862

2022-09-2314:15:13

CWE-787

[email protected]

web.nvd.nist.gov

tenda ac15

ac18

stackoverflow

vulnerability

fromnatstaticsetting

request

natstaticsetting

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

58.5%

JSON

Tenda AC15 and AC18 router V15.03.05.19 contains stack overflow vulnerability in the function fromNatStaticSetting with the request /goform/NatStaticSetting

Affected configurations

Nvd

Node

tendacnac15_firmwareMatch15.03.05.19

AND

tendacnac15Match-

Node

tendacnac18_firmwareMatch15.03.05.19

AND

tendacnac18Match-

VendorProductVersionCPE
tendacnac15_firmware15.03.05.19cpe:2.3:o:tendacn:ac15_firmware:15.03.05.19:*:*:*:*:*:*:*
tendacnac15-cpe:2.3:h:tendacn:ac15:-:*:*:*:*:*:*:*
tendacnac18_firmware15.03.05.19cpe:2.3:o:tendacn:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*
tendacnac18-cpe:2.3:h:tendacn:ac18:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tendacn	ac15_firmware	15.03.05.19	cpe:2.3:o:tendacn:ac15_firmware:15.03.05.19:::::::*
tendacn	ac15	-	cpe:2.3:h:tendacn:ac15:-:::::::*
tendacn	ac18_firmware	15.03.05.19	cpe:2.3:o:tendacn:ac18_firmware:15.03.05.19:::::::*
tendacn	ac18	-	cpe:2.3:h:tendacn:ac18:-:::::::*