CVE-2022-28556

Tenda AC15 US_AC15V1.0BR_V15.03.05.20_multi_TDE01.bin is vulnerable to Buffer Overflow. The stack overflow vulnerability lies in the /goform/setpptpservercfg interface of the web. The sent post data startip and endip are copied to the stack using the sanf function, resulting in stack overflow. Similarly, this vulnerability can be used together with CVE-2021-44971

• CWE-787

• https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.mdExploit, Third Party Advisory
• https://github.com/doudoudedi/TendaAC15_vul/blob/main/TendaAC15-vul.mdExploit, Third Party Advisory

Published

May 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28543Path traversal vulnerability in Samsung Flow prior to versio…5.5
• CVE-2022-28544Path traversal vulnerability in unzip method of InstallAgent…5.5
• CVE-2022-28545FUDforum 3.1.1 is vulnerable to Stored XSS.5.4
• CVE-2022-2855Use after free in ANGLE in Google Chrome prior to 104.0.5112…8.8
• CVE-2022-28550Matthias-Wandel/jhead jhead 3.06 is vulnerable to Buffer Ove…9.8
• CVE-2022-28552Cscms 4.1 is vulnerable to SQL Injection. Log into the backg…8.8
• CVE-2022-28557There is a command injection vulnerability at the /goform/se…9.8
• CVE-2022-2856Insufficient validation of untrusted input in Intents in Goo…6.5
• CVE-2022-28560There is a stack overflow vulnerability in the goform/fast_s…9.8
• CVE-2022-28561There is a stack overflow vulnerability in the /goform/setMa…9.8
• CVE-2022-28568Sourcecodester Doctor's Appointment System 1.0 is vulnerable…9.8
• CVE-2022-2857Use after free in Blink in Google Chrome prior to 104.0.5112…8.8