CVE Catalog

CVE-2022-36233

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

15th percentile - higher than 15% of all known CVEs

Summary

A buffer overflow vulnerability was discovered in the Tenda AC9 router firmware version V15.03.2.13 in the httpd process. The issue occurs in the form_fast_setting_wifi_set function, potentially allowing remote code execution.

Risk Assessment

An attacker could exploit this vulnerability to take control of the router, compromising the confidentiality and integrity of the local network and potentially attacking other devices.

Recommendation

Immediately update the Tenda AC9 router firmware to the latest available version. If no update is available, restrict management interface access to trusted networks only.

Original NVD description (English source)

Tenda AC9 V15.03.2.13 is vulnerable to Buffer Overflow via httpd, form_fast_setting_wifi_set. httpd.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS