Security Advisory

CVE-2022-40855

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-09-23 14:29:36

Last updated 2025-05-22 20:01:35

Assigner mitre

State PUBLISHED

Description

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request goform/setPortMapping/. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.

← Browse all CVEs View on cve.org ↗