Vulnerability Details CVE-2020-22079
Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.055
EPSS Ranking 89.7%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
- https://cwe.mitre.org/data/definitions/121.html
- https://github.com/1sd3d/Tendown/tree/master/PoCs/Auth/bof11
- https://github.com/Lyc-heng/routers/blob/main/routers/stack1.md
- https://cwe.mitre.org/data/definitions/121.html
- https://github.com/1sd3d/Tendown/tree/master/PoCs/Auth/bof11
- https://github.com/Lyc-heng/routers/blob/main/routers/stack1.md
Products affected by CVE-2020-22079
-
cpe:2.3:h:tendacn:ac10u:1.0
-
cpe:2.3:h:tendacn:ac9:1.0
-
cpe:2.3:h:tendacn:ac9:3.0
-
cpe:2.3:o:tendacn:ac10u_firmware:15.03.06.48_multi_tde01
-
cpe:2.3:o:tendacn:ac9_firmware:15.03.05.19(6318)
-
cpe:2.3:o:tendacn:ac9_firmware:15.03.06.42_multi