CVE-2022-36585

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-07

Last modified

2024-08-03

Weaknesses

CWE-120

Affected products

• G3 Firmware (Tenda)

References

• https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-0x62158.md
• https://www.tendacn.com/download/detail-3401.html