CVE-2022-36568

Tenda AC9 V15.03.05.19 was discovered to contain a stack overflow via the list parameter at /goform/setPptpUserList...

CVE-2022-36568

Affected software : Tenda AC9 with firmware 15.03.05.19. Vulnerability : stack overflow in the processing of the parameter list at the API endpoint "/goform/setPptpUserList". The root cause is a mishandling of the list parameter leading to a stack overflow, as described across multiple sources....