Описание
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of nptr. When this value is passed into the getMibPrefix function and concatenated using sprintf without proper size validation, it could lead to a buffer overflow vulnerability.
Ссылки
- ExploitThird Party Advisory
- Product
Уязвимые конфигурации
Одновременно
EPSS
9.8 Critical
CVSS3
Дефекты
Связанные уязвимости
An issue was discovered in Tenda W20E V4.0br_V15.11.0.6. Attackers may exploit the vulnerability by controlling the value of `nptr`. When this value is passed into the `getMibPrefix` function and concatenated using `sprintf` without proper size validation, it could lead to a buffer overflow vulnerability.
Уязвимость функции getMibPrefix (goform/formWifiFilterRulesAdd) микропрограммного обеспечения маршрутизаторов Tenda W20E, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
9.8 Critical
CVSS3