deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2022-22621
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions.
CVSS Score: 4.6 (MEDIUM)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22622
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to see sensitive information via keyboard suggestions.
CVSS Score: 4.6 (MEDIUM)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22623
Published: 2022-03-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-22625
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved input validation. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22626
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22627
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. Processing a maliciously crafted AppleScript binary may result in unexpected application termination or disclosure of process memory.
CVSS Score: 7.1 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22631
Published: 2022-03-18
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22632
Published: 2022-03-18
Description: A logic issue was addressed with improved state management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, watchOS 8.5, macOS Monterey 12.3. A malicious application may be able to elevate privileges.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184
CVE: CVE-2022-22633
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved state management. This issue is fixed in watchOS 8.5, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, macOS Monterey 12.3. Opening a maliciously crafted PDF file may lead to an unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184
CVE: CVE-2022-22634
Published: 2022-03-18
Description: A buffer overflow was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. A malicious application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213186; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22635
Published: 2022-03-18
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to gain elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213186; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22636
Published: 2022-03-18
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213186; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22638
Published: 2022-03-18
Description: A null pointer dereference was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An attacker in a privileged position may be able to perform a denial of service attack.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-476
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184
CVE: CVE-2022-22639
Published: 2022-03-18
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.
CVSS Score: 7.8 (HIGH)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22640
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3, watchOS 8.5. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22641
Published: 2022-03-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. An application may be able to gain elevated privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22642
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4. A user may be able to bypass the Emergency SOS passcode prompt.
CVSS Score: 9.8 (CRITICAL)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22643
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in iOS 15.4 and iPadOS 15.4, macOS Monterey 12.3. A user may send audio and video in a FaceTime call without knowing that they have done so.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213183; https://support.apple.com/kb/HT213446
CVE: CVE-2022-22644
Published: 2022-03-18
Description: A privacy issue existed in the handling of Contact cards. This was addressed with improved state management. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to access information about a user's contacts.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213183
CVE: CVE-2022-22647
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A person with access to a Mac may be able to bypass Login Window.
CVSS Score: 4.6 (MEDIUM)
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22648
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to read restricted memory.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22650
Published: 2022-03-18
Description: This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A plug-in may be able to inherit the application's permissions and access user data.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-281
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22651
Published: 2022-03-18
Description: An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in macOS Monterey 12.3. A remote attacker may be able to cause unexpected system termination or corrupt kernel memory.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/kb/HT213184; https://support.apple.com/en-us/HT213183
CVE: CVE-2022-22652
Published: 2022-03-18
Description: The GSMA authentication panel could be presented on the lock screen. The issue was resolved by requiring device unlock to interact with the GSMA authentication panel. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access may be able to view and modify the carrier account information and settings from the lock screen.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-306
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22653
Published: 2022-03-18
Description: A logic issue was addressed with improved restrictions. This issue is fixed in iOS 15.4 and iPadOS 15.4. A malicious website may be able to access information about the user and their devices.
CVSS Score: 7.5 (HIGH)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22654
Published: 2022-03-18
Description: A user interface issue was addressed. This issue is fixed in watchOS 8.5, Safari 15.4. Visiting a malicious website may lead to address bar spoofing.
CVSS Score: 4.3 (MEDIUM)
References: https://support.apple.com/en-us/HT213187; https://support.apple.com/en-us/HT213193; https://support.apple.com/en-us/HT213187
CVE: CVE-2022-22656
Published: 2022-03-18
Description: An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen.
CVSS Score: 3.3 (LOW)
CWE: CWE-287
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22657
Published: 2022-03-18
Description: A memory initialization issue was addressed with improved memory handling. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-665
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213190; https://support.apple.com/en-us/HT213191
CVE: CVE-2022-22659
Published: 2022-03-18
Description: A logic issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An attacker in a privileged network position may be able to leak sensitive user information.
CVSS Score: 6.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22660
Published: 2022-03-18
Description: This issue was addressed with a new entitlement. This issue is fixed in macOS Monterey 12.3. An app may be able to spoof system notifications and UI.
CVSS Score: 5.5 (MEDIUM)
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213183
CVE: CVE-2022-22661
Published: 2022-03-18
Description: A type confusion issue was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213184; https://support.apple.com/en-us/HT213185
CVE: CVE-2022-22664
Published: 2022-03-18
Description: An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Logic Pro 10.7.3, GarageBand 10.4.6, macOS Monterey 12.3. Opening a maliciously crafted file may lead to unexpected application termination or arbitrary code execution.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213190; https://support.apple.com/en-us/HT213191
CVE: CVE-2022-22665
Published: 2022-03-18
Description: A logic issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.3. A malicious application may be able to gain root privileges.
CVSS Score: 7.8 (HIGH)
References: http://seclists.org/fulldisclosure/2022/May/33; http://seclists.org/fulldisclosure/2022/May/35; https://support.apple.com/en-us/HT213183
CVE: CVE-2022-22666
Published: 2022-03-18
Description: A memory corruption issue was addressed with improved validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. Processing a maliciously crafted image may lead to heap corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/167144/AppleVideoDecoder-CreateHeaderBuffer-Out-Of-Bounds-Free.html; https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213186
CVE: CVE-2022-22667
Published: 2022-03-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.4 and iPadOS 15.4. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-22669
Published: 2022-03-18
Description: A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://support.apple.com/en-us/HT213183; https://support.apple.com/en-us/HT213183
CVE: CVE-2022-22670
Published: 2022-03-18
Description: An access issue was addressed with improved access restrictions. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, watchOS 8.5. A malicious application may be able to identify what other applications a user has installed.
CVSS Score: 3.3 (LOW)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213186; https://support.apple.com/en-us/HT213193
CVE: CVE-2022-22671
Published: 2022-03-18
Description: An authentication issue was addressed with improved state management. This issue is fixed in iOS 15.4 and iPadOS 15.4. A person with physical access to an iOS device may be able to access photos from the lock screen.
CVSS Score: 4.6 (MEDIUM)
References: https://support.apple.com/en-us/HT213182; https://support.apple.com/en-us/HT213182
CVE: CVE-2022-24091
Published: 2022-03-18
Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious font file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb22-01.html; https://helpx.adobe.com/security/products/acrobat/apsb22-01.html
CVE: CVE-2022-24092
Published: 2022-03-18
Description: Acrobat Reader DC version 21.007.20099 (and earlier), 20.004.30017 (and earlier) and 17.011.30204 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious font file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://helpx.adobe.com/security/products/acrobat/apsb22-01.html; https://helpx.adobe.com/security/products/acrobat/apsb22-01.html
CVE: CVE-2022-25602
Published: 2022-03-18
Description: Nonce token leak vulnerability leading to arbitrary file upload, theme deletion, plugin settings change discovered in Responsive Menu WordPress plugin (versions <= 4.1.7).
CVSS Score: 8.3 (HIGH)
CWE: CWE-200, CWE-434
References: https://patchstack.com/database/vulnerability/responsive-menu/wordpress-responsive-menu-plugin-4-1-7-nonce-token-leak-leading-to-arbitrary-file-upload-theme-deletion-plugin-settings-change-vulnerability; https://wordpress.org/plugins/responsive-menu/#developers; https://patchstack.com/database/vulnerability/responsive-menu/wordpress-responsive-menu-plugin-4-1-7-nonce-token-leak-leading-to-arbitrary-file-upload-theme-deletion-plugin-settings-change-vulnerability
CVE: CVE-2022-25603
Published: 2022-03-18
Description: Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in MaxGalleria WordPress plugin (versions 6.2.5).
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/maxgalleria/wordpress-maxgalleria-plugin-6-2-5-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/maxgalleria/; https://patchstack.com/database/vulnerability/maxgalleria/wordpress-maxgalleria-plugin-6-2-5-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-25604
Published: 2022-03-18
Description: Authenticated (contributor of higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Price Table plugin (versions <= 0.2.2).
CVSS Score: 4.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting-xss-vulnerability; https://wordpress.org/plugins/pricetable/; https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting-xss-vulnerability
CVE: CVE-2022-25605
Published: 2022-03-18
Description: Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities discovered in WP-DownloadManager WordPress plugin (versions <= 1.68.6). Vvulnerable parameters &download_path, &download_path_url, &download_page_url.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-6-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities; https://wordpress.org/plugins/wp-downloadmanager/#developers; https://patchstack.com/database/vulnerability/wp-downloadmanager/wordpress-wp-downloadmanager-plugin-1-68-6-multiple-authenticated-stored-cross-site-scripting-xss-vulnerabilities
CVE: CVE-2022-25607
Published: 2022-03-18
Description: Authenticated (author or higher user role) SQL Injection (SQLi) vulnerability discovered in FV Flowplayer Video Player WordPress plugin (versions <= 7.5.15.727).
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-89, CWE-89
References: https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-15-727-sql-injection-sqli-vulnerability; https://wordpress.org/plugins/fv-wordpress-flowplayer/#developers; https://patchstack.com/database/vulnerability/fv-wordpress-flowplayer/wordpress-fv-flowplayer-video-player-plugin-7-5-15-727-sql-injection-sqli-vulnerability
CVE: CVE-2022-27243
Published: 2022-03-18
Description: An issue was discovered in MISP before 2.4.156. app/View/Users/terms.ctp allows Local File Inclusion via the custom terms file setting.
CVSS Score: 7.8 (HIGH)
References: https://github.com/MISP/MISP/commit/8cc93687dcd68e1774b55a5c4e8125c0c8ddc288; https://github.com/MISP/MISP/commit/8cc93687dcd68e1774b55a5c4e8125c0c8ddc288
CVE: CVE-2022-27244
Published: 2022-03-18
Description: An issue was discovered in MISP before 2.4.156. A malicious site administrator could store an XSS payload in the custom auth name. This would be executed each time the administrator modifies a user.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/61d4d3670593b78e4dab7a11eb620b7a372f30e6; https://github.com/MISP/MISP/commit/61d4d3670593b78e4dab7a11eb620b7a372f30e6
CVE: CVE-2022-27245
Published: 2022-03-18
Description: An issue was discovered in MISP before 2.4.156. app/Model/Server.php does not restrict generateServerSettings to the CLI. This could lead to SSRF.
CVSS Score: 8.8 (HIGH)
CWE: CWE-918
References: https://github.com/MISP/MISP/commit/8dcf414340c5ddedfebbc972601646d38e1d0717; https://github.com/MISP/MISP/commit/8dcf414340c5ddedfebbc972601646d38e1d0717
CVE: CVE-2022-27246
Published: 2022-03-18
Description: An issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is not forbidden by default.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/MISP/MISP/commit/08a07a38ae81f3b55d81cfcd4501ac1eb1c9c4dc; https://github.com/MISP/MISP/commit/08a07a38ae81f3b55d81cfcd4501ac1eb1c9c4dc
CVE: CVE-2022-26502
Published: 2022-03-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none
CVE: CVE-2022-25427
Published: 2022-03-18
Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the schedendtime parameter in the openSchedWifi function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/2; https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/2
CVE: CVE-2022-25428
Published: 2022-03-18
Description: Tenda AC9 v15.03.2.21 was discovered to contain a stack overflow via the deviceId parameter in the saveparentcontrolinfo function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/3; https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/3
CVE: CVE-2022-25429
Published: 2022-03-18
Description: Tenda AC9 v15.03.2.21 was discovered to contain a buffer overflow via the time parameter in the saveparentcontrolinfo function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/1; https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/1
CVE: CVE-2022-25431
Published: 2022-03-18
Description: Tenda AC9 v15.03.2.21 was discovered to contain multiple stack overflows via the NPTR, V12, V10 and V11 parameter in the Formsetqosband function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/4; https://github.com/EPhaha/IOT_vuln/tree/main/Tenda/AC9/4