Vulnerability Description
Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Tenda | Ax1803 Firmware | 1.0.0.1_2890 |
| Tenda | Ax1803 | - |
Related Weaknesses (CWE)
References
- https://github.com/Le1a/CVE-2022-30040ExploitThird Party Advisory
- https://github.com/Le1a/Tenda-AX1803-Denial-of-serviceExploitThird Party Advisory
- https://github.com/Le1a/CVE-2022-30040ExploitThird Party Advisory
- https://github.com/Le1a/Tenda-AX1803-Denial-of-serviceExploitThird Party Advisory
FAQ
What is CVE-2022-30040?
CVE-2022-30040 is a vulnerability with a CVSS score of 7.5 (HIGH). Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform...
How severe is CVE-2022-30040?
CVE-2022-30040 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-30040?
Check the references section above for vendor advisories and patch information. Affected products include: Tenda Ax1803 Firmware, Tenda Ax1803.