Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow
Vulnerability Description
A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
栈缓冲区溢出
Vulnerability Title
Tenda CH22 安全漏洞
Vulnerability Description
Tenda CH22是中国腾达（Tenda）公司的一款网络设备。 Tenda CH22 1.0.0.1及之前版本存在安全漏洞，该漏洞源于对文件/goform/AdvSetWrlsafeset中参数mit_ssid_index的错误操作，可能导致栈缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A