CVE-2022-25546

high · 7.5

Tenda AX1806 v1.0.0.1 was discovered to contain a stack overflow in the function formSetSysToolDDNS. This vulnerability allows attackers to cause a Denial of Service (DoS) via the ddnsUser parameter.

7.5

CVSS

12.3%

EPSS (exploit prob.)

96th

EPSS percentile

2022-03-10

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses

CWE-787

Affected products

Vendor	Product	Affected versions
tenda	ax1806_firmware	1.0.0.1
tenda	ax1806	all versions

Check a specific version with /api/v1/cve/match.

References

https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/6
https://github.com/sec-bin/IoT-CVE/tree/main/Tenda/AX1806/6

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2022-25546