← Vulnerability feed

Vulnerability record · CVE-2022-47118 · published 30 December 2022

CVE-2022-47118: Tenda a15 firmware out-of-bounds write vulnerability

Tenda · A15 Firmware

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.

9.8 CVSS 3.1 Critical EPSS 0.87% · top 42.7% CWE-787 · Out-of-bounds write
9.8CVSS 3.1 base score
0.87%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

Tenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey1 parameter at /goform/WifiBasicSet.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://brief-nymphea-813.notion.site/Vul7-A15-bof-WifiBasicSet-wepkey1-f89406bc85b04e53ad970a7cc847df25 ExploitThird Party Advisory
https://brief-nymphea-813.notion.site/Vul7-A15-bof-WifiBasicSet-wepkey1-f89406bc85b04e53ad970a7cc847df25 ExploitThird Party Advisory

Track CVE-2022-47118 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2022-47115Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepauth parameter at /goform/WifiBasicSet.EPSS 0.87%9.8CVE-2022-47117Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security parameter at /goform/WifiBasicSet.EPSS 0.87%9.8CVE-2022-47119Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the ssid parameter at /goform/WifiBasicSet.EPSS 0.87%9.8CVE-2022-47120Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the security_5g parameter at /goform/WifiBasicSet.EPSS 0.87%9.8CVE-2022-47121Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey parameter at /goform/WifiBasicSet.EPSS 0.87%9.8CVE-2022-47122Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wrlPwd_5g parameter at /goform/WifiBasicSet.EPSS 0.87%9.8CVE-2022-47123Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey3 parameter at /goform/WifiBasicSet.EPSS 0.97%9.8CVE-2022-47124Tenda a15 firmware out-of-bounds write vulnerabilityTenda A15 V15.13.07.13 was discovered to contain a stack overflow via the wepkey4 parameter at /goform/WifiBasicSet.EPSS 0.87%

Source: NIST National Vulnerability Database (record CVE-2022-47118), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.