Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-4354

Опубликовано: 06 мая 2025
Источник: nvd
CVSS3: 8.8
CVSS3: 9.8
CVSS2: 9
EPSS Низкий

Описание

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dlink:dap-1520_firmware:1.10b04:beta02:*:*:*:*:*:*
cpe:2.3:h:dlink:dap-1520:-:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00378
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 8.8
github
9 месяцев назад

A vulnerability was found in Tenda DAP-1520 1.10B04_BETA02 and classified as critical. Affected by this issue is the function check_dws_cookie of the file /storage. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVSS3: 9.8
fstec
9 месяцев назад

Уязвимость функции check_dws_cookie файла /storage микропрограммного обеспечения маршрутизатора Tenda DAP-1520, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 59%
0.00378
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

9 Critical

CVSS2

Дефекты

CWE-119
CWE-787