Buffer Overflow Vulnerability in Tenda Router Products
CVE-2023-27062

7.5HIGH

Key Information:

Vendor
Tenda
Status
W15e Firmware
Vendor
CVE Published:
13 March 2023

Summary

The buffer overflow vulnerability in Tenda V15V1.0, specifically within the formPortalAuth function, enables attackers to exploit the gotoUrl parameter. By crafting malicious requests, attackers can trigger a Denial of Service (DoS), impacting the availability and functionality of the affected device. This poses a significant risk to network security, as unauthorized access or service interruptions may occur.

References

https://github.com/didi-zhiyuan/vuln/blob/main/iot/Tenda/...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.