PT-2022-23490 · Tenda · Tenda G3

Published 2022-09-07 · Updated 2022-09-09 · CVE-2022-36586

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda G3 version US G3V3.0br V15.11.0.6(7663) EN TDE

Description The issue is caused by a buffer overflow vulnerability due to the use of strcpy in the function at address 0x869f4 within the httpd binary.

Recommendations For Tenda G3 version US G3V3.0br V15.11.0.6(7663) EN TDE, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2022-36586

Affected Products

Tenda G3

References · 4

• https://osv.dev/vulnerability/CVE-2022-36586 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36586 · Security Note
• https://tendacn.com/download/detail-3401.html · Vendor Advisory
• ❌ https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-%200x869f4.md · Note, Deleted