CVE-2022-40860: Critical severity Tendacn Ac15 Firmware vulnerability
Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN0007dd20 with request /goform/SetNetControlList
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-40860?
CVE-2022-40860 is a stack overflow vulnerability found in the Tenda AC15 router firmware version 15.03.05.19.
What is the severity of CVE-2022-40860?
CVE-2022-40860 is classified as a critical vulnerability with a severity rating of 9.8.
How does CVE-2022-40860 affect Tenda AC15 routers?
CVE-2022-40860 allows an attacker to execute arbitrary code or cause a denial-of-service condition on Tenda AC15 routers by exploiting a stack overflow vulnerability in the function formSetQosBand.
How can I check if my Tenda AC15 router is affected by CVE-2022-40860?
If your Tenda AC15 router is running firmware version 15.03.05.19, it is affected by CVE-2022-40860.
How do I mitigate CVE-2022-40860?
To mitigate CVE-2022-40860, it is recommended to update your Tenda AC15 router firmware to a version that includes a fix for the vulnerability.