Lucene search

[email protected]NVD:CVE-2022-38313

HistorySep 07, 2022 - 7:15 p.m.

CVE-2022-38313

2022-09-0719:15:08

CWE-787

[email protected]

web.nvd.nist.gov

tenda

ac18

router

stack overflow

time parameter

/goform/saveparentcontrolinfo

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

61.7%

JSON

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/saveParentControlInfo.

Affected configurations

Nvd

Node

tendaac18_firmwareMatch15.03.05.05

tendaac18_firmwareMatch15.03.05.19\(6318\)

AND

tendaac18Match-

VendorProductVersionCPE
tendaac18_firmware15.03.05.05cpe:2.3:o:tenda:ac18_firmware:15.03.05.05:*:*:*:*:*:*:*
tendaac18_firmware15.03.05.19(6318)cpe:2.3:o:tenda:ac18_firmware:15.03.05.19\(6318\):*:*:*:*:*:*:*
tendaac18-cpe:2.3:h:tenda:ac18:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ac18_firmware	15.03.05.05	cpe:2.3:o:tenda:ac18_firmware:15.03.05.05:::::::*
tenda	ac18_firmware	15.03.05.19(6318)	cpe:2.3:o:tenda:ac18_firmware:15.03.05.19\(6318\):::::::*
tenda	ac18	-	cpe:2.3:h:tenda:ac18:-:::::::*

References

github.com/rickytriky/NWPU_Projct/tree/main/Tenda/AC18/2

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

61.7%

JSON

Related for NVD:CVE-2022-38313

cvelist1 prion1 cve1