CVE-2022-24143
First published: Fri Feb 04 2022(Updated: )
Tenda AX3 v16.03.12.10_CN and AX12 22.03.01.2_CN was discovered to contain a stack overflow in the function form_fast_setting_wifi_set. This vulnerability allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tenda Ax3 Firmware | =16.03.12.10_cn | |
| Tenda AX3 | ||
| Tenda Ax12 Firmware | =22.03.01.2_cn | |
| Tenda AX12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the vulnerability ID of this Tenda AX3 and AX12 vulnerability?
The vulnerability ID is CVE-2022-24143.
What is the severity level of CVE-2022-24143?
The severity level of CVE-2022-24143 is high, with a severity value of 7.5.
What is the affected software for CVE-2022-24143?
The affected software for CVE-2022-24143 is Tenda AX3 firmware version 16.03.12.10_CN and Tenda AX12 firmware version 22.03.01.2_CN.
What is the impact of CVE-2022-24143?
CVE-2022-24143 allows attackers to cause a Denial of Service (DoS) via the timeZone parameter.
Is Tenda AX3 and AX12 vulnerable to CVE-2022-24143?
Tenda AX3 and AX12 are vulnerable to CVE-2022-24143 if they are running the affected firmware versions.
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/references
- agent/weakness
- agent/tags
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/event
- vendor/tenda
- canonical/tenda ax3 firmware
- version/tenda ax3 firmware/16.03.12.10_cn
- canonical/tenda ax3
- canonical/tenda ax12 firmware
- version/tenda ax12 firmware/22.03.01.2_cn
- canonical/tenda ax12