Lucene search

K
nvd[email protected]NVD:CVE-2023-49427
HistoryJan 10, 2024 - 9:15 a.m.

CVE-2023-49427

2024-01-1009:15:44
CWE-787
web.nvd.nist.gov
tenda ax12
buffer overflow
setnetcontrollist
remote attackers
denial of service

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

29.5%

Buffer Overflow vulnerability in Tenda AX12 V22.03.01.46, allows remote attackers to cause a denial of service (DoS) via list parameter in SetNetControlList function.

Affected configurations

NVD
Node
tendaax12Match-
AND
tendaax12_firmwareMatch22.03.01.46

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

29.5%

Related for NVD:CVE-2023-49427