CVE-2020-20746

2021-09-3020:41:27

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.1%

JSON

A stack-based buffer overflow in the httpd server on Tenda AC9 V15.03.06.60_EN allows remote attackers to execute arbitrary code or cause a denial of service (DoS) via a crafted POST request to /goform/SetStaticRouteCfg.

References

cwe.mitre.org/data/definitions/121.html

github.com/grapefruitvul/vulinfo/blob/master/tenda/vul1.md