CVE-2022-45995

Severity: critical (CVSS 9.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-01-05 · updated 2026-06-17
Weakness: CWE-120

Description

There is an unauthorized buffer overflow vulnerability in Tenda AX12 v22.03.01.21 _ cn. This vulnerability can cause the web service not to restart or even execute arbitrary code. It is a different vulnerability from CVE-2022-2414.

Affected products

Tenda Ax12 Firmware: 22.03.01.21_cn

References

https://github.com/bugfinder0/public_bug/tree/main/tenda/ax12/1
https://github.com/bugfinder0/public_bug/tree/main/tenda/ax12/1

Get alerted when CVE-2022-45995 or the next vulnerability affects your stack