Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-02197
HistoryJan 04, 2023 - 12:00 a.m.

Tenda A15 wrlEn parameter stack overflow vulnerability

2023-01-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
tenda a15
wifi extender
stack overflow
vulnerability
wrlen parameter
arbitrary code
remote attacker
boundary check
china
cnvd

0.002 Low

EPSS

Percentile

59.1%

Tenda A15 is a WiFi extender from Tenda (China).A stack overflow vulnerability exists in the Tenda A15 wrlEn parameter, which is caused by an incorrect boundary check performed by /goform/WifiBasicSet. By sending an excessively long string using the wrlEn parameter, a remote attacker could exploit the vulnerability to execute arbitrary code on the system.

CPENameOperatorVersion
tenda tenda a15 v15.eq13.07.13

0.002 Low

EPSS

Percentile

59.1%

Related for CNVD-2023-02197