CVE-2022-48130

Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2023-02-02

Last modified

2025-03-26

Weaknesses

CWE-787

Affected products

• W20e Firmware (Tenda)

References

• https://github.com/Stevenbaga/fengsha/blob/main/W20E/formSetStaticRoute.md