CVE-2022-40855

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service DoS or Remote Code Execution RCE via the portMappingServer, portMappingProtocol, portMappingWan,...

CVE-2022-40855

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service DoS or Remote Code Execution RCE via the portMappingServer, portMappingProtocol, portMappingWan,...

CVE-2022-40855

The CVE-2022-40855 issue affects the Tenda W20E router (firmware V15.11.0.6). A stack overflow in the formSetPortMapping function can be triggered via a POST to goform/setPortMapping/, with parameters such as portMappingServer, portMappingProtocol, portMappingWan, portMappingInternal, and portMap...