PT-2022-23269 · Tenda · Tenda Ac9

Amalll · Published 2022-08-19 · Updated 2022-08-21 · CVE-2022-36233

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Tenda AC9 version 15.03.2.13

Description The issue is related to a Buffer Overflow via httpd, specifically in the form fast setting wifi set function. This affects the httpd service.

Recommendations For Tenda AC9 version 15.03.2.13, consider disabling the httpd service or restricting access to the form fast setting wifi set function until a patch is available. Avoid using the form fast setting wifi set function in the affected httpd endpoint until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-36233

Affected Products

Tenda Ac9

References · 5

• 🔥 https://cnblogs.com/Amalll/p/16606980.html · Exploit
• https://osv.dev/vulnerability/CVE-2022-36233 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36233 · Security Note
• https://t.me/cvenotify/35013 · Telegram Post
• http://tenda.com · Note