deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-32797
Published: 2022-09-23
Description: This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-20
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32798
Published: 2022-09-23
Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. An app may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32799
Published: 2022-09-23
Description: An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Monterey 12.5. A user in a privileged network position may be able to leak sensitive information.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32800
Published: 2022-09-23
Description: This issue was addressed with improved checks. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to modify protected parts of the file system.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32801
Published: 2022-09-23
Description: This issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.5. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32805
Published: 2022-09-23
Description: The issue was addressed with improved handling of caches. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to access sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32807
Published: 2022-09-23
Description: This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files.
CVSS Score: 7.1 (HIGH)
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32815
Published: 2022-09-23
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32816
Published: 2022-09-23
Description: The issue was addressed with improved UI handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Visiting a website that frames malicious content may lead to UI spoofing.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-451
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32817
Published: 2022-09-23
Description: An out-of-bounds read issue was addressed with improved bounds checking. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32818
Published: 2022-09-23
Description: The issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.5. An app may be able to leak sensitive kernel state.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32819
Published: 2022-09-23
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32820
Published: 2022-09-23
Description: An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32821
Published: 2022-09-23
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32823
Published: 2022-09-23
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to leak sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-665, CWE-665
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32825
Published: 2022-09-23
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213344
CVE: CVE-2022-32826
Published: 2022-09-23
Description: An authorization issue was addressed with improved state management. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32828
Published: 2022-09-23
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, tvOS 15.6, macOS Monterey 12.5. An app may be able to disclose kernel memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213346
CVE: CVE-2022-32829
Published: 2022-09-23
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213346; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32831
Published: 2022-09-23
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32832
Published: 2022-09-23
Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app with root privileges may be able to execute arbitrary code with kernel privileges.
CVSS Score: 6.7 (MEDIUM)
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32841
Published: 2022-09-23
Description: The issue was addressed with improved memory handling. This issue is fixed in watchOS 8.7, tvOS 15.6, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. Processing a maliciously crafted image may result in disclosure of process memory.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32842
Published: 2022-09-23
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Monterey 12.5. An app may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32843
Published: 2022-09-23
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted Postscript file may result in unexpected app termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-787, CWE-787
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32845
Published: 2022-09-23
Description: This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-693
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213346
CVE: CVE-2022-32847
Published: 2022-09-23
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, watchOS 8.7, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. A remote user may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-119
References: https://support.apple.com/en-us/HT213340; https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343
CVE: CVE-2022-32848
Published: 2022-09-23
Description: A logic issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to capture a user’s screen.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-284
References: https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213344
CVE: CVE-2022-32849
Published: 2022-09-23
Description: An information disclosure issue was addressed by removing the vulnerable code. This issue is fixed in iOS 15.6 and iPadOS 15.6, macOS Big Sur 11.6.8, tvOS 15.6, macOS Monterey 12.5, Security Update 2022-005 Catalina. An app may be able to access sensitive user information.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-200
References: https://support.apple.com/en-us/HT213342; https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344
CVE: CVE-2022-32851
Published: 2022-09-23
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32852
Published: 2022-09-23
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213345; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-32853
Published: 2022-09-23
Description: An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. Processing a maliciously crafted AppleScript binary may result in unexpected termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125, CWE-125
References: https://support.apple.com/en-us/HT213343; https://support.apple.com/en-us/HT213344; https://support.apple.com/en-us/HT213345
CVE: CVE-2022-35246
Published: 2022-09-23
Description: A NoSQL-Injection information disclosure vulnerability vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 in the getS3FileUrl Meteor server method that can disclose arbitrary file upload URLs to users that should not be able to access.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://hackerone.com/reports/1458020; https://hackerone.com/reports/1458020
CVE: CVE-2022-35247
Published: 2022-09-23
Description: A information disclosure vulnerability exists in Rocket.chat <v5, <v4.8.2 and <v4.7.5 where the lack of ACL checks in the getRoomRoles Meteor method leak channel members with special roles to unauthorized clients.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://hackerone.com/reports/1447440; https://hackerone.com/reports/1447440
CVE: CVE-2022-35248
Published: 2022-09-23
Description: A improper authentication vulnerability exists in Rocket.Chat <v5, <v4.8.2 and <v4.7.5 that allowed two factor authentication can be bypassed when telling the server to use CAS during login.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-287
References: https://hackerone.com/reports/1448268; https://hackerone.com/reports/1448268
CVE: CVE-2022-35249
Published: 2022-09-23
Description: A information disclosure vulnerability exists in Rocket.Chat <v5 where the getUserMentionsByChannel meteor server method discloses messages from private channels and direct messages regardless of the users access permission to the room.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200, CWE-862
References: https://hackerone.com/reports/1410246; https://hackerone.com/reports/1410246
CVE: CVE-2022-35250
Published: 2022-09-23
Description: A privilege escalation vulnerability exists in Rocket.chat <v5 which made it possible to elevate privileges for any authenticated user to view Direct messages without appropriate permissions.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-732, CWE-732
References: https://hackerone.com/reports/917946; https://hackerone.com/reports/917946
CVE: CVE-2022-35251
Published: 2022-09-23
Description: A cross-site scripting vulnerability exists in Rocket.chat <v5 due to style injection in the complete chat window, an adversary is able to manipulate not only the style of it, but will also be able to block functionality as well as hijacking the content of targeted users. Hence the payloads are stored in messages, it is a persistent attack vector, which will trigger as soon as the message gets viewed.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://hackerone.com/reports/1401268; https://hackerone.com/reports/1401268
CVE: CVE-2022-35893
Published: 2022-09-23
Description: An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. An SMM memory corruption vulnerability in the FvbServicesRuntimeDxe driver allows an attacker to write fixed or predictable data to SMRAM. Exploiting this issue could lead to escalating privileges to SMM.
CVSS Score: 8.2 (HIGH)
CWE: CWE-20, CWE-20
References: https://binarly.io/advisories/BRLY-2022-026/index.html; https://www.insyde.com/security-pledge; https://www.insyde.com/security-pledge/SA-2022035
CVE: CVE-2022-36340
Published: 2022-09-23
Description: Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://patchstack.com/database/vulnerability/mailoptin/wordpress-mailoptin-plugin-1-2-49-0-unauthenticated-optin-campaign-cache-deletion-vulnerability/_s_id=cve; https://plugins.svn.wordpress.org/mailoptin/trunk/changelog.txt; https://patchstack.com/database/vulnerability/mailoptin/wordpress-mailoptin-plugin-1-2-49-0-unauthenticated-optin-campaign-cache-deletion-vulnerability/_s_id=cve
CVE: CVE-2022-38079
Published: 2022-09-23
Description: Cross-Site Request Forgery (CSRF) vulnerability Backup Scheduler plugin <= 1.5.13 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/backup-scheduler/wordpress-backup-scheduler-plugin-1-5-13-cross-site-request-forgery-csrf-vulnerability/_s_id=cve; https://wordpress.org/plugins/backup-scheduler/; https://patchstack.com/database/vulnerability/backup-scheduler/wordpress-backup-scheduler-plugin-1-5-13-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
CVE: CVE-2022-38438
Published: 2022-09-23
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-38439
Published: 2022-09-23
Description: Adobe Experience Manager versions 6.5.13.0 (and earlier) is affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser. Exploitation of this issue requires low-privilege access to AEM.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html; https://helpx.adobe.com/security/products/experience-manager/apsb22-40.html
CVE: CVE-2022-38454
Published: 2022-09-23
Description: Cross-Site Request Forgery (CSRF) vulnerability in Kraken.io Image Optimizer plugin <= 2.6.5 at WordPress.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/kraken-image-optimizer/wordpress-kraken-io-image-optimizer-plugin-2-6-5-cross-site-request-forgery-csrf-vulnerability/_s_id=cve; https://wordpress.org/plugins/kraken-image-optimizer/; https://patchstack.com/database/vulnerability/kraken-image-optimizer/wordpress-kraken-io-image-optimizer-plugin-2-6-5-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
CVE: CVE-2022-38704
Published: 2022-09-23
Description: Cross-Site Request Forgery (CSRF) vulnerability in SEO Redirection plugin <= 8.9 at WordPress, leading to deletion of 404 errors and redirection history.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352
References: https://patchstack.com/database/vulnerability/seo-redirection/wordpress-seo-redirection-plugin-8-9-cross-site-request-forgery-csrf-vulnerability/_s_id=cve; https://wordpress.org/plugins/seo-redirection/#developers; https://patchstack.com/database/vulnerability/seo-redirection/wordpress-seo-redirection-plugin-8-9-cross-site-request-forgery-csrf-vulnerability/_s_id=cve
CVE: CVE-2022-3263
Published: 2022-09-23
Description: The security descriptor of Measuresoft ScadaPro Server version 6.7 has inconsistent permissions, which could allow a local user with limited privileges to modify the service binary path and start malicious commands with SYSTEM privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-276
References: https://www.cisa.gov/uscert/ics/advisories/icsa-22-265-01; https://www.cisa.gov/uscert/ics/advisories/icsa-22-265-01
CVE: CVE-2022-40100
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a command injection vulnerability via the FormexeCommand function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-77
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/Command_Injection_formexeCommand.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/Command_Injection_formexeCommand.md
CVE: CVE-2022-40101
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formWifiMacFilterSet function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterSet.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formWifiMacFilterSet.md
CVE: CVE-2022-40102
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDset function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDset.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDset.md
CVE: CVE-2022-40103
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formSetAutoPing function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787, CWE-787
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formSetAutoPing.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formSetAutoPing.md
CVE: CVE-2022-40104
Published: 2022-09-23
Description: Tenda i9 v1.0.0.8(3828) was discovered to contain a buffer overflow via the formwrlSSIDget function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDget.md; https://github.com/splashsc/IOT_Vulnerability_Discovery/blob/main/Tenda/Tenda_i9/buffer_overflow_formwrlSSIDget.md