Stack Overflow Vulnerability in Tenda W30E by Tenda Technology
CVE-2022-45512

7.5HIGH

Key Information:

Vendor

Tenda
Status
W30e Firmware
Vendor
CVE Published:
8 December 2022

What is CVE-2022-45512?

The Tenda W30E routing device contains a significant stack overflow vulnerability that can be exploited via the 'page' parameter on the '/goform/SafeEmailFilter' endpoint. This security flaw could allow attackers to execute arbitrary code or cause a denial of service, potentially compromising the affected network. It is crucial for users to apply updates or mitigations recommended by the vendor to secure their devices against possible exploit attempts.

References

https://github.com/z1r00/IOT_Vul/blob/main/Tenda/W30E/Saf...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.