Stack Overflow Vulnerability in Tenda AX3 Wi-Fi Router
CVE-2022-24151

7.5HIGH

Key Information:

Vendor
Tenda
Status
Ax3 Firmware
Vendor
CVE Published:
4 February 2022

Summary

The Tenda AX3 router version v16.03.12.10_CN is susceptible to a stack overflow vulnerability in the fromSetWifiGusetBasic function. This flaw can result in a Denial of Service (DoS) condition when exploited through manipulated shareSpeed parameters, potentially disrupting network availability and affecting users connected to the router. Ensuring the prompt application of patches or firmware updates is critical to mitigating risks associated with this vulnerability.

References

https://github.com/pjqwudi/my_vuln/blob/main/Tenda/vuln_2...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.