CVE-2022-40855: Critical severity Tenda W20e Firmware vulnerability
Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-40855?
CVE-2022-40855 has a high severity rating as it allows for Denial of Service (DoS) and potential Remote Code Execution (RCE).
How do I fix CVE-2022-40855?
To fix CVE-2022-40855, update the Tenda W20E router firmware to the latest version provided by the manufacturer.
What systems are affected by CVE-2022-40855?
CVE-2022-40855 specifically affects Tenda W20E router firmware version 15.11.0.6.
What kind of attack can be performed using CVE-2022-40855?
CVE-2022-40855 can be exploited to conduct Denial of Service attacks or execute arbitrary code remotely.
What is the impact of exploiting CVE-2022-40855?
Exploiting CVE-2022-40855 may lead to service interruptions or unauthorized control over the vulnerable Tenda W20E router.