Lucene search
HistoryMar 13, 2023 - 2:15 p.m.
CVE-2023-27062
cve-2023-27062
tenda
v15v1.0
buffer overflow
formportalauth
dos
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
32.6%
Tenda V15V1.0 was discovered to contain a buffer overflow vulnerability via the gotoUrl parameter in the formPortalAuth function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
Affected configurations
Node
tendaw15e_firmwareMatch15.11.0.14
tendaw15eMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| tenda:w15e_firmware | tenda w15e firmware | eq | 15.11.0.14 |
Related
cvelist
cvelist
CVE-2023-27062
2023-03-13 00:00:00
prion
prion
Buffer overflow
2023-03-13 14:15:00
nvd
nvd
CVE-2023-27062
2023-03-13 14:15:13
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
32.6%
Related for CVE-2023-27062