CVE-2021-46393
CVSS v3
9.8
CRITICAL
EPSS Score
3.5 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack overflow. By POSTing the page /goform/SetPptpServerCfg with proper startIp, the attacker can easily perform remote code execution with carefully crafted overflow data.
Technical details
- Published
- 2022-03-04
Frequently asked questions
What is CVE-2021-46393?
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack overflow. By POSTing the page /goform/SetPptpServerCfg with proper startIp, the attacker can easily perform remote code execution with carefully crafted overflow data.
Is CVE-2021-46393 actively exploited?
Active exploitation of CVE-2021-46393 has not been confirmed. The EPSS score is 3.5%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2021-46393?
CVE-2021-46393 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2021-46393 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2021 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).