Buffer Overflow Vulnerability in Tenda F1203 by Tenda
CVE-2022-46550

7.5HIGH

Key Information:

Vendor

Tenda
Status
F1203 Firmware
Vendor
CVE Published:
20 December 2022

What is CVE-2022-46550?

The Tenda F1203 router, specifically version V2.0.1.6, has been found to have a buffer overflow vulnerability that can be exploited through the 'urls' parameter in the '/goform/saveParentControlInfo' endpoint. This vulnerability allows an attacker to manipulate the router's memory, potentially leading to unauthorized access or control over the device. It is crucial for users of this router to apply security patches or firmware updates to mitigate this risk.

References

https://github.com/Double-q1015/CVE-vulns/blob/main/tenda...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.