Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-02198
HistoryJan 04, 2023 - 12:00 a.m.

Tenda A15 wrlPwd_5g Parameter Stack Overflow Vulnerability

2023-01-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
tenda a15
wifi extender
stack overflow
vulnerability
boundary check
remote attacker
arbitrary code
system security

0.002 Low

EPSS

Percentile

59.1%

Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wrlPwd_5g parameter, which is caused by an incorrect boundary check performed by /goform/WifiBasicSet. By sending an excessively long string using the wrlPwd_5g parameter, a remote attacker could exploit the vulnerability to execute arbitrary code on the system.

CPENameOperatorVersion
tenda tenda a15 v15.eq13.07.13

0.002 Low

EPSS

Percentile

59.1%

Related for CNVD-2023-02198