Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-q4gh-23q4-v22c

Опубликовано: 07 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 8.7
CVSS3: 8.8

Описание

A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the argument data leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the argument data leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

EPSS

Процентиль: 50%
0.00269
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-120

Связанные уязвимости

CVSS3: 8.8
nvd
больше 1 года назад

A vulnerability, which was classified as critical, was found in Tenda i22 1.0.0.3(4687). Affected is the function formApPortalPhoneAuth of the file /goform/apPortalPhoneAuth. The manipulation of the argument data leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость функции formApPortalPhoneAuth микропрограммного обеспечения маршрутизаторов Tenda i22, позволяющая нарушителю оказать воздействие на конфиденциальность, целостность и доступность защищаемой информации

EPSS

Процентиль: 50%
0.00269
Низкий

8.7 High

CVSS4

8.8 High

CVSS3

Дефекты

CWE-120