Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
CVE-2022-38567: Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the...
CVE-2022-38567 · published 4 years ago
Summary
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the authIPs parameter.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| tenda | m3_firmware |
1.0.0.12\(4856\) cpe:2.3:o:tenda:m3_firmware:1.0.0.12\(4856\):*:*:*:*:*:*:* |
Original advisory text
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the...
Tenda M3 V1.0.0.12(4856) was discovered to contain a stack overflow vulnerability in the function formSetAdConfigInfo. This vulnerability allows attackers to cause a Denial of Service (DoS) via the authIPs parameter.
References
- https://github.com/xxy1126/Vuln/tree/main/Tenda%20M3/formSetAdConfigInfo_ Exploit Technical Description
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-787Out-of-bounds Write
Timeline
Published28 Aug 2022
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2022-38567 · NVD
Track software like this
Free during beta