CVE-2022-30040: tenda ax1803_firmware Out-of-bounds Write
Vulnerability summary
CVE-2022-30040 is a high (CVSS 7.5) Out-of-bounds Write vulnerability in tenda ax1803_firmware. EPSS estimates a 1.89% chance of exploitation in the next 30 days, higher than 79.3% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 11-05-2022PublishedVulnerability first disclosed.
- 03-08-2024Last modifiedVulnerability information updated.
Description
Tenda AX1803 v1.0.0.1_2890 is vulnerable to Buffer Overflow. The vulnerability lies in rootfs_ In / goform / setsystimecfg of / bin / tdhttpd in ubif file system, attackers can access http://ip/goform/SetSysTimeCfg, and by setting the ntpserve parameter, the stack buffer overflow can be caused to achieve the effect of router denial of service.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.89%
Chance of exploitation in the next 30 days
Percentile
79%
Versus all other CVEs
30-day change
Increase +0.03 pp
From 1.86% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundTenda Ax1803 Denial Of Service
Maturity: poc
Cve 2022 30040
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Tenda1 product
- ax1803_firmware1.0.0.1_2890
1 vendor · 1 product