{ "schema_version": "1.4.0", "id": "GHSA-mjg9-3572-g437", "modified": "2022-08-28T00:00:27Z", "published": "2022-08-26T00:03:31Z", "aliases": [ "CVE-2022-37292" ], "details": "Tenda AX12 V22.03.01.21_CN is vulnerable to Buffer Overflow. This overflow is triggered in the sub_42FDE4 function, which satisfies the request of the upper-level interface function sub_430124, that is, handles the post request under /goform/SetIpMacBind.", "severity": [ { "type": "CVSS_V3", "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } ], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-37292" }, { "type": "WEB", "url": "https://github.com/The-Itach1/IOT-CVE/tree/master/Tenda/AX12/1" } ], "database_specific": { "cwe_ids": [ "CWE-787" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2022-08-25T16:15:00Z" } }