CVE-2022-42080

2022-10-1219:15:09

CWE-787

[email protected]

web.nvd.nist.gov

tenda ac1206

heap overflow

vulnerability

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

45.8%

JSON

Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter.

Affected configurations

Nvd

Node

tendaac1206_firmwareMatch15.03.06.23_multi_td01

AND

tendaac1206Match-

VendorProductVersionCPE
tendaac1206_firmware15.03.06.23_multi_td01cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23_multi_td01:*:*:*:*:*:*:*
tendaac1206-cpe:2.3:h:tenda:ac1206:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tenda	ac1206_firmware	15.03.06.23_multi_td01	cpe:2.3:o:tenda:ac1206_firmware:15.03.06.23_multi_td01:::::::*
tenda	ac1206	-	cpe:2.3:h:tenda:ac1206:-:::::::*