Threats tagged 'ghsa-mw27-fg8f-7899'

A buffer overflow vulnerability exists in the Tenda CH22 firmware version 1.0.0.1, specifically in the formWrlExtraGet function of the /goform/WrlExtraGet file. Manipulating the chkHz argument can trigger this overflow, allowing remote attackers to potentially execute arbitrary code or cause denial of service. Public exploit code is available, increasing the risk of exploitation. The vulnerability has a high severity rating with a CVSS score of 8.8.