CVE-2022-36587

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, there is a buffer overflow vulnerability caused by sprintf in function in the httpd binary.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-07

Last modified

2025-06-17

Weaknesses

CWE-120

Affected products

• G3 Firmware (Tenda)

References

• https://github.com/Davidteeri/Bug-Report/blob/main/tenda-G3-%200x53208.md
• https://www.tendacn.com/download/detail-3401.html