Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-02256
HistoryJan 04, 2023 - 12:00 a.m.

Tenda A15 wepkey parameter stack overflow vulnerability

2023-01-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
tenda china wifi extender stack overflow vulnerability input data /goform/wifibasicset arbitrary code execution system attack exploitcnvd

0.002 Low

EPSS

Percentile

59.1%

Tenda A15 is a WiFi extender from Tenda, China. A stack overflow vulnerability exists in the Tenda A15 wepkey parameter, which stems from a lack of length checking of input data in the wepkey parameter of /goform/WifiBasicSet, and can be exploited by attackers to execute arbitrary code on the system.

CPENameOperatorVersion
tenda tenda a15 v15.eq13.07.13

0.002 Low

EPSS

Percentile

59.1%

Related for CNVD-2023-02256