CVE-2022-36586: Buffer Overflow
Published Sep 7, 2022
·Updated
In Tenda G3 USG3V3.0brV15.11.0.6(7663)ENTDE, there is a buffer overflow vulnerability caused by strcpy in function 0x869f4 in the httpd binary.
Affected Software
2 affected components
Tenda G3 Firmware=15.11.0.6\(7663\)
Tenda G3
Remediation
Patch Available
Event History
Sep 7, 2022
CVE Published
via MITRE·11:48 PM
Data Sourced
via MITRE·11:48 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-36586.
2
What is the severity of CVE-2022-36586?
The severity of CVE-2022-36586 is critical with a CVSS score of 9.8.
3
How does CVE-2022-36586 affect Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE?
CVE-2022-36586 affects Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE by exploiting a buffer overflow vulnerability in the httpd binary.
4
How can I fix CVE-2022-36586?
To fix CVE-2022-36586, it is recommended to update to a patched version of Tenda G3 firmware. The download link can be found at https://www.tendacn.com/download/detail-3401.html.
5
What are the Common Weakness Enumeration (CWE) IDs associated with CVE-2022-36586?
The Common Weakness Enumeration (CWE) IDs associated with CVE-2022-36586 are CWE-119 and CWE-120.