Description
A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formWrlExtraGet of the file /goform/GstDhcpSetSer. This manipulation of the argument dips causes buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
Metrics
CVSS 3.1 8.8/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Tenda | CH22 | 1.0.0.1 |
References
- https://github.com/zhaoyinshan/CVE/issues/2Exploit, Third Party Advisory
- https://vuldb.com/?ctiid.326198Permissions Required, VDB Entry
- https://vuldb.com/?id.326198Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.662927Third Party Advisory, VDB Entry
- https://www.tenda.com.cn/Product
Timeline
- Published
- Sep 28, 2025
- Last modified
- Oct 9, 2026
- NVD status
- Analyzed