Tenda AC23 V16.03.07.45_cn was discovered to contain a stack overflow via the devName parameter in the formSetDeviceName function.
References
Link | Resource |
---|---|
https://github.com/ppcrab/IOT_FIRMWARE/blob/main/Tenda/ac23/ac23.md#formsetdevicenameset_device_namesprintfv4-s1-a1 | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2022-11-03 07:15
Updated : 2022-11-03 10:20
NVD link : CVE-2022-43101
Mitre link : CVE-2022-43101
JSON object : View
CWE
CWE-787
Out-of-bounds Write
Products Affected
tenda
- ac23
- ac23_firmware