CVE-2022-30040: Buffer Overflow
Tenda AX1803 v1.0.0.12890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-30040?
CVE-2022-30040 is a vulnerability in Tenda AX1803 v1.0.0.1_2890 that allows for a buffer overflow attack.
How severe is CVE-2022-30040?
CVE-2022-30040 has a severity rating of 7.5 (high).
What software versions are affected by CVE-2022-30040?
Tenda AX1803 Firmware version 1.0.0.1_2890 is affected by CVE-2022-30040.
How can an attacker exploit CVE-2022-30040?
An attacker can exploit CVE-2022-30040 by accessing the http://ip/goform/SetSysTimeCfg URL and causing a stack buffer overflow by setting the ntpserve parameter.
Are there any references for CVE-2022-30040?
Yes, you can find more information about CVE-2022-30040 at the following links: [GitHub - CVE-2022-30040](https://github.com/Le1a/CVE-2022-30040) and [GitHub - Tenda AX1803 Denial-of-service](https://github.com/Le1a/Tenda-AX1803-Denial-of-service).