CVE-2022-40855

CRITICAL 9.8CVE-2022-40855 · Published 23/09/2022 · updated 17/06/2026

In short

CVE-2022-40855 is a CRITICAL (CVSS 9.8) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 14.1%, higher than 96.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

Tenda W20E router V15.11.0.6 contains a stack overflow in the function formSetPortMapping with post request 'goform/setPortMapping/'. This vulnerability allows attackers to cause a Denial of Service (DoS) or Remote Code Execution (RCE) via the portMappingServer, portMappingProtocol, portMappingWan, porMappingtInternal, and portMappingExternal parameters.

References

CPSeek/Router-vuls · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free