Lucene search

K
nvd[email protected]NVD:CVE-2022-42164
HistoryOct 17, 2022 - 1:15 p.m.

CVE-2022-42164

2022-10-1713:15:10
CWE-787
web.nvd.nist.gov
7
tenda ac10
v15.03.06.23
stack overflow
vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

61.7%

Tenda AC10 V15.03.06.23 contains a Stack overflow vulnerability via /goform/formSetClientState.

Affected configurations

Nvd
Node
tendaac10_firmwareMatch15.03.06.23
AND
tendaac10Match-
VendorProductVersionCPE
tendaac10_firmware15.03.06.23cpe:2.3:o:tenda:ac10_firmware:15.03.06.23:*:*:*:*:*:*:*
tendaac10-cpe:2.3:h:tenda:ac10:-:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

61.7%

Related for NVD:CVE-2022-42164