CVE-2022-30040

Опубликовано: 11 мая 2022

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.

Ссылки

https://github.com/Le1a/CVE-2022-30040
Exploit
Third Party Advisory
https://github.com/Le1a/Tenda-AX1803-Denial-of-service
Exploit
Third Party Advisory
https://github.com/Le1a/CVE-2022-30040
Exploit
Third Party Advisory
https://github.com/Le1a/Tenda-AX1803-Denial-of-service
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:tenda:ax1803_firmware:1.0.0.1_2890:*:*:*:*:*:*:*

cpe:2.3:h:tenda:ax1803:-:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00465

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-ppjc-pf2v-9xvx