8.8
CVE-2021-31627
- EPSS 0.12%
- Veröffentlicht 29.10.2021 11:15:08
- Zuletzt bearbeitet 21.11.2024 06:06:02
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginBuffer Overflow vulnerability in Tenda AC9 V1.0 through V15.03.05.19(6318), and AC9 V3.0 V15.03.06.42_multi, allows attackers to execute arbitrary code via the index parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tendacn ≫ Ac9 Firmware Version <= 15.03.06.42_multi
Tendacn ≫ Ac9 Firmware Version <= 15.03.05.19\(6318\)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.12% | 0.272 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 5.8 | 6.5 | 6.4 |
AV:A/AC:L/Au:N/C:P/I:P/A:P
|
CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer, leading to a buffer overflow.