Описание
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Third Party Advisory
- Permissions Required
- Product
Уязвимые конфигурации
Конфигурация 1
Одновременно
cpe:2.3:o:tenda:ac10_firmware:16.03.10.10_multi_tde01:*:*:*:*:*:*:*
cpe:2.3:h:tenda:ac10:4.0:*:*:*:*:*:*:*
EPSS
Процентиль: 44%
0.00571
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
CVSS3: 8.8
github
5 месяцев назад
A vulnerability was found in Tenda AC10 16.03.10.10_multi_TDE01. Affected by this vulnerability is the function fromSysToolChangePwd of the file /bin/httpd. Performing a manipulation of the argument sys.userpass results in stack-based buffer overflow. The attack can be initiated remotely.
EPSS
Процентиль: 44%
0.00571
Низкий
8.8 High
CVSS3
9 Critical
CVSS2
Дефекты
CWE-119