CVE-2021-44352 — Out-of-bounds Write in Ac15 Firmware

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.8CRITICALNVD
EPSS
5.5%
top 9.74%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Tendacn Ac15 Firmware
Timeline
PublishedDec 3
Latest updateDec 4

Description

A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15.03.05.18_multi device via the list parameter in a post request in goform/SetIpMacBind.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDtendacn/ac15_firmware15.03.05.18_multi

🔴Vulnerability Details

2
GHSA
GHSA-c5x3-r36q-xxfh: A Stack-based Buffer Overflow vlnerability exists in the Tenda AC15 V15↗2021-12-04
▶
CVEList
CVE-2021-44352: A Stack-based Buffer Overflow vulnerability exists in the Tenda AC15 V15↗2021-12-03
▶

💥Exploits & PoCs

1
Nuclei
Adobe Coldfusion - Cross-Site Scripting
▶
CVE-2021-44352 — Out-of-bounds Write in Ac15 Firmware | cvebase