CVE-2022-24145 is a stack overflow vulnerability found in the Tenda AX3 router (firmware version v16.03.12.10_CN). Attackers can trigger a Denial of Service (DoS) by manipulating the security and security_5g parameters within the formWifiBasicSet function. This vulnerability is rated High severity (CVSS 7.5), indicating it can be exploited remotely without authentication or user interaction, leading to a complete loss of availability for the affected device. While no public exploit code or active exploitation has been observed, and community discussion is minimal, organizations using the Tenda AX3 should consider patching or mitigating this risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
16.03.12.10_cnCPE matchmatch criteria | cpe:2.3:o:tenda:ax3_firmware:16.03.12.10_cn:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.