Lucene search

MitreCVE-2023-25235

HistoryFeb 27, 2023 - 4:15 p.m.

CVE-2023-25235

2023-02-2716:15:13

CWE-787

mitre

web.nvd.nist.gov

cve-2023-25235

tenda ac500

buffer overflow

vulnerability

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.4%

JSON

Tenda AC500 V2.0.1.9(1307) is vulnerable to Buffer Overflow in function formOneSsidCfgSet via parameter ssid.

Affected configurations

Nvd

Node

tendaac500_firmwareMatch2.0.1.9\(1307\)

AND

tendaac500Match-

VendorProductVersionCPE
tendaac500_firmware2.0.1.9(1307)cpe:2.3:o:tenda:ac500_firmware:2.0.1.9\(1307\):*:*:*:*:*:*:*
tendaac500-cpe:2.3:h:tenda:ac500:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ac500_firmware	2.0.1.9(1307)	cpe:2.3:o:tenda:ac500_firmware:2.0.1.9\(1307\):::::::*
tenda	ac500	-	cpe:2.3:h:tenda:ac500:-:::::::*

References

github.com/Funcy33/Vluninfo_Repo/tree/main/CNVDs/113_2

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

46.4%

JSON

Related for CVE-2023-25235