CVE-2022-46109
published 2022-12-16CVE-2022-46109: Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.
PriorityP340high7.5CVSS 3.1
AVNACLPRNUINSUCNINAH
EPSS
0.94%
60.6th percentile
Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| tenda | ac10_firmware | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Tenda AC15 15.03.06.23 formSetClientState buffer overflow (EUVD-2022-48947)
vuldb·2026-10-09·CVSS 7.5
CVE-2022-46109 [HIGH] Tenda AC15 15.03.06.23 formSetClientState buffer overflow (EUVD-2022-48947)
A vulnerability labeled as critical has been found in Tenda AC15 15.03.06.23. This vulnerability affects the function formSetClientState. Executing a manipulation can lead to buffer overflow.
This vulnerability is tracked as CVE-2022-46109. The attack is only possible within the local network. No exploit exists.
GHSA
GHSA-vxg5-pjm2-5jg2: Tenda AC15 V15
ghsa_unreviewed·2022-12-21
CVE-2022-46109 [HIGH] CWE-787 GHSA-vxg5-pjm2-5jg2: Tenda AC15 V15
Tenda AC15 V15.03.06.23 is vulnerable to Buffer Overflow via function formSetClientState.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-12-16
Published