Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87933
HistoryOct 14, 2022 - 12:00 a.m.

Tenda AC1206 setSchedWifi function sched_end_time buffer overflow vulnerability

2022-10-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
tenda
ac1206
setschedwifi
buffer overflow
vulnerability
firmware
us_ac1206v1.0rtl_v15.03.06.23_multi_td01
httpd
openschedwifi
denial of service
cnvd

EPSS

0.001

Percentile

45.8%

The AC1206 is a high-performance router designed with gigabit ports on both WAN and LAN ports. tenda AC1206 firmware version US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to a buffer overflow vulnerability that originates in the /bin/httpd file /goform/. The sched_end_time parameter of the setSchedWifi function in openSchedWifi lacks length validation for the input data, which can be exploited by attackers to cause a denial of service.

EPSS

0.001

Percentile

45.8%

Related for CNVD-2022-87933