CVE-2020-22079

Stack-based buffer overflow in Tenda AC-10U AC1200 Router US_AC10UV1.0RTL_V15.03.06.48_multi_TDE01 allows remote attackers to execute arbitrary code via the timeZone parameter to goform/SetSysTimeCfg.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

4.17% chance of exploitation in the next 30 days, 90th percentile

Published

2021-10-29

Updated

2024-08-04

Proof-of-concept exploits (1)

• Lyc-heng/routers/blob/main/routers/stack1.md

References

• CVE Record
• NVD entry

Related

• CVE-2020-26728
• CVE-2021-31624
• CVE-2021-31627
• CVE-2021-42659
• CVE-2020-22056
• CVE-2020-22083