CVE-2022-44172

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function R7WebsSecurityHandler.
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*

History

28 Nov 2022, 13:44

Type Values Removed Values Added
CPE cpe:2.3:o:tenda:ac18_firmware:15.03.05.19:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
CWE CWE-120
References (MISC) https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/R7WebsSecurityHandler/Tenda_AC18_V15.03.05.19_Vuln_password.md - (MISC) https://github.com/RobinWang825/IoT_vuln/blob/main/Tenda/AC18/R7WebsSecurityHandler/Tenda_AC18_V15.03.05.19_Vuln_password.md - Broken Link, Third Party Advisory

21 Nov 2022, 18:44

Type Values Removed Values Added
New CVE

Information

Published : 2022-11-21 18:15

Updated : 2024-02-04 23:14


NVD link : CVE-2022-44172

Mitre link : CVE-2022-44172

CVE.ORG link : CVE-2022-44172


JSON object : View

Products Affected

tenda

  • ac18
  • ac18_firmware
CWE
CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')