CVE-2022-40876

In Tenda ax1803 v1.0.0.1, the http requests handled by the fromAdvSetMacMtuWan functions, wanSpeed, cloneType, mac, can cause a stack overflow and enable remote code execution (RCE).

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-10-27

Last modified

2025-05-07

Weaknesses

CWE-787

Affected products

• Ax1803 Firmware (Tenda)

References

• https://www.cnblogs.com/L0g4n-blog/p/16695155.html
• https://www.cnblogs.com/L0g4n-blog/p/16704071.html