Description
There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can obtain a stable root shell through a constructed payload.
Unscored
CVE-2022-27022
EUVD-2022-31562GHSA-vqpx-8vjh-qxx9
There is a stack overflow vulnerability in the SetSysTimeCfg() function in the httpd service of Tenda AC9 V15.03.2.21_cn. The attacker can …
Published Apr 7, 2022 · Updated Aug 3, 2024 · Assigned by mitre