Vulnerabilities > CVE-2022-24166 - Out-of-bounds Write vulnerability in Tendacn G1 Firmware and G3 Firmware

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
COMPLETE
network
low complexity
tendacn
CWE-787

Summary

Tenda routers G1 and G3 v15.11.0.17(9502)_CN were discovered to contain a stack overflow in the function formSetSysTime. This vulnerability allows attackers to cause a Denial of Service (DoS) via the manualTime parameter.

Common Weakness Enumeration (CWE)