PT-2022-26709 · Tenda · Tenda Tx3

Published 2022-10-19 · Updated 2022-10-20 · CVE-2022-43025

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda TX3 US TX3V1.0br V16.03.13.11 multi TDE01

Description A stack overflow issue was discovered via the startIp parameter at the "/goform/SetPptpServerCfg" API endpoint.

Recommendations For Tenda TX3 US TX3V1.0br V16.03.13.11 multi TDE01, avoid using the startIp parameter in the affected API endpoint until the issue is resolved.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-43025

Affected Products

Tenda Tx3

References · 3

• 🔥❌ https://github.com/tianhui999/myCVE/blob/main/TX3/TX3-1.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2022-43025 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43025 · Security Note