CVE-2022-47116

CVE-2022-47116 affects Tenda A15 (firmware version 15.13.07.13). A stack overflow is triggered via the SYSPS parameter in the /goform/SysToolChangePwd endpoint. Underlying cause: lack of input length checking on SYSPS leads to memory corruption and potential denial of service (as indicated by CVS...