CVE-2022-40071

Tenda AC21 V 16.03.08.15 is vulnerable to Buffer Overflow via /bin/httpd, formSetDeviceName...

CVE-2022-40071

CVE-2022-40071 affects Tenda AC21, specifically version 16.03.08.15, where the vulnerability resides in the /bin/httpd endpoint’s formSetDeviceName. The root cause is a lack of length checking in formSetDeviceName, enabling a buffer overflow. Documented impact includes triggering an httpd restart...