CVE-2022-40860
First published: Fri Sep 23 2022(Updated: )
Tenda AC15 router V15.03.05.19 contains a stack overflow vulnerability in the function formSetQosBand->FUN_0007dd20 with request /goform/SetNetControlList
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tendacn Ac15 Firmware | =15.03.05.19 | |
| Tendacn Ac15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2022-40860?
CVE-2022-40860 is a stack overflow vulnerability found in the Tenda AC15 router firmware version 15.03.05.19.
What is the severity of CVE-2022-40860?
CVE-2022-40860 is classified as a critical vulnerability with a severity rating of 9.8.
How does CVE-2022-40860 affect Tenda AC15 routers?
CVE-2022-40860 allows an attacker to execute arbitrary code or cause a denial-of-service condition on Tenda AC15 routers by exploiting a stack overflow vulnerability in the function formSetQosBand.
How can I check if my Tenda AC15 router is affected by CVE-2022-40860?
If your Tenda AC15 router is running firmware version 15.03.05.19, it is affected by CVE-2022-40860.
How do I mitigate CVE-2022-40860?
To mitigate CVE-2022-40860, it is recommended to update your Tenda AC15 router firmware to a version that includes a fix for the vulnerability.
- collector/nvd-index
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/severity
- agent/references
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/tendacn
- canonical/tendacn ac15 firmware
- version/tendacn ac15 firmware/15.03.05.19
- canonical/tendacn ac15