CVE-2022-45524

CVE-2022-45524 affects Tenda W30E, specifically version 1.0.1.25(633). The issue is a stack overflow discovered in the opttype parameter exposed via the /goform/IPSECsave API. CVSS 3.1 base score 7.5 (HIGH) with NETWORK attack vector, no privileges required, no user interaction. Impact is listed ...

CVE-2022-45524: Out-of-bounds Write

Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the opttype parameter at /goform/IPSECsave...