Buffer Overflow Vulnerability in Tenda i9 Router
CVE-2022-40104
7.5HIGH
Summary
The Tenda i9 router version 1.0.0.8(3828) is prone to a buffer overflow vulnerability in the formwrlSSIDget function. An attacker can exploit this vulnerability by sending a specially crafted string to the affected function, which may result in a Denial of Service (DoS) condition, disrupting the normal operation of the device. This highlights the importance of securing IoT devices against potential exploitation.
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved