Description (CNA)
A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and could be used.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Tenda / AC23 | affected 16.03.07.0; affected 16.03.07.1; affected 16.03.07.2; affected 16.03.07.3; affected 16.03.07.4; affected 16.03.07.5; affected 16.03.07.6; affected 16.03.07.7; affected 16.03.07.8; affected 16.03.07.9; affected 16.03.07.10; affected 16.03.07.11; affected 16.03.07.12; affected 16.03.07.13; affected 16.03.07.14; affected 16.03.07.15; affected 16.03.07.16; affected 16.03.07.17; affected 16.03.07.18; affected 16.03.07.19; affected 16.03.07.20; affected 16.03.07.21; affected 16.03.07.22; affected 16.03.07.23; affected 16.03.07.24; affected 16.03.07.25; affected 16.03.07.26; affected 16.03.07.27; affected 16.03.07.28; affected 16.03.07.29; affected 16.03.07.30; affected 16.03.07.31; affected 16.03.07.32; affected 16.03.07.33; affected 16.03.07.34; affected 16.03.07.35; affected 16.03.07.36; affected 16.03.07.37; affected 16.03.07.38; affected 16.03.07.39; affected 16.03.07.40; affected 16.03.07.41; affected 16.03.07.42; affected 16.03.07.43; affected 16.03.07.44; affected 16.03.07.45; affected 16.03.07.46; affected 16.03.07.47; affected 16.03.07.48; affected 16.03.07.49; affected 16.03.07.50; affected 16.03.07.51; affected 16.03.07.52 |
CWE
CWE-120, CWE-119
References
- https://vuldb.com/?id.327241
- https://vuldb.com/?ctiid.327241
- https://vuldb.com/?submit.664923
- https://github.com/cymiao1978/cve/blob/main/12.md
- https://www.tenda.com.cn/
ADP enrichment
No English description supplied.
No references supplied.