CVE-2022-30040

Katalog CVE

CVSS 7.5 · High EPSS 1,9%

Kerentanan Out-of-bounds Write pada tenda ax1803 firmware. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.

Rincian

Terbit di NVD

11 Mei 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

1,9% peluang dieksploitasi; lebih tinggi dari 79,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/Le1a/CVE-2022-30040 exploit · advisory pihak ketiga
• https://github.com/Le1a/Tenda-AX1803-Denial-of-service exploit · advisory pihak ketiga