CVE-2022-44365
published 2022-12-02CVE-2022-44365: Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.
PriorityP356critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.97%
61.8th percentile
Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tenda | i21_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Tenda i21 1.0.0.14 /goform/setSysPwd stack-based overflow (EUVD-2022-47310)
vuldb·2026-09-18·CVSS 9.8
CVE-2022-44365 [CRITICAL] Tenda i21 1.0.0.14 /goform/setSysPwd stack-based overflow (EUVD-2022-47310)
A vulnerability was found in Tenda i21 1.0.0.14. It has been rated as critical. This affects an unknown part of the file /goform/setSysPwd. This manipulation causes stack-based buffer overflow.
This vulnerability is handled as CVE-2022-44365. The attack can only be done within the local network. There is not any exploit available.
GHSA
GHSA-fw85-28j6-9pmh: Tenda i21 V1
ghsa_unreviewed·2022-12-02
CVE-2022-44365 [CRITICAL] CWE-787 GHSA-fw85-28j6-9pmh: Tenda i21 V1
Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-02
Published