Details of VAR-202603-5549

ID

VAR-202603-5549

CVE

CVE-2026-5204

TITLE

Shenzhen Tenda Technology Co.,Ltd. of ch22 Multiple vulnerabilities in firmware

Trust: 0.8

sources: JVNDB: JVNDB-2026-009897

DESCRIPTION

A vulnerability was determined in Tenda CH22 1.0.0.1. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary of the component Parameter Handler. This manipulation of the argument webSiteId causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The attack code is publicly available and could be exploited.All information handled by the software may be leaked to the outside. All information handled by the software may be rewritten. Furthermore, the software may stop working completely. Furthermore, attacks that exploit this vulnerability will not affect other software

Trust: 1.62

sources: NVD: CVE-2026-5204 // JVNDB: JVNDB-2026-009897

AFFECTED PRODUCTS

vendor:	tenda	model:	ch22	scope:	eq	version:	1.0.0.1	Trust: 1.0
vendor:	tenda	model:	ch22	scope:	-	version:	-	Trust: 0.8
vendor:	tenda	model:	ch22	scope:	eq	version:	ch22 firmware 1.0.0.1	Trust: 0.8
vendor:	tenda	model:	ch22	scope:	eq	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2026-009897 // NVD: CVE-2026-5204

CVSS

SEVERITY

CVSSV2

CVSSV3

cna@vuldb.com:	CVE-2026-5204
value:	HIGH
Trust: 1.0
OTHER:	JVNDB-2026-009897
value:	HIGH
Trust: 0.8

cna@vuldb.com:	CVE-2026-5204
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	8.0
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.0
OTHER:	JVNDB-2026-009897
severity:	HIGH
baseScore:	9.0
vectorString:	AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	SINGLE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	NONE
impactScore:	NONE
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.8

cna@vuldb.com:	CVE-2026-5204
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	2.8
impactScore:	5.9
version:	3.1
Trust: 1.0
OTHER:	JVNDB-2026-009897
baseSeverity:	HIGH
baseScore:	8.8
vectorString:	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2026-009897 // NVD: CVE-2026-5204

PROBLEMTYPE DATA

problemtype:	CWE-787	Trust: 1.0
problemtype:	CWE-121	Trust: 1.0
problemtype:	CWE-119	Trust: 1.0
problemtype:	Buffer error (CWE-119) [ others ]	Trust: 0.8
problemtype:	Stack-based buffer overflow (CWE-121) [ others ]	Trust: 0.8
problemtype:	Out-of-bounds writing (CWE-787) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2026-009897 // NVD: CVE-2026-5204

PATCH

title:

//vuldb.com/vuln/354332

url:

https://github.com/Litengzheng/vuldb_new/blob/main/CH22/vul_49/README.md

Trust: 0.8

sources: JVNDB: JVNDB-2026-009897

EXTERNAL IDS

db:	NVD	id:	CVE-2026-5204	Trust: 2.6
db:	JVNDB	id:	JVNDB-2026-009897	Trust: 0.8

sources: JVNDB: JVNDB-2026-009897 // NVD: CVE-2026-5204

REFERENCES

url:	https://www.tenda.com.cn/	Trust: 1.8
url:	https://vuldb.com/submit/780209	Trust: 1.0
url:	https://vuldb.com/vuln/354332/cti	Trust: 1.0
url:	https://vuldb.com/vuln/354332	Trust: 1.0
url:	https://github.com/litengzheng/vuldb_new/blob/main/ch22/vul_49/readme.md	Trust: 1.0
url:	https://nvd.nist.gov/vuln/detail/cve-2026-5204	Trust: 0.8

sources: JVNDB: JVNDB-2026-009897 // NVD: CVE-2026-5204

SOURCES

db:	JVNDB	id:	JVNDB-2026-009897
db:	NVD	id:	CVE-2026-5204

LAST UPDATE DATE

2026-04-07T23:32:12.876000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2026-009897	date:	2026-04-06T02:55:00
db:	NVD	id:	CVE-2026-5204	date:	2026-04-02T12:07:54.830

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2026-009897	date:	2026-04-06T00:00:00
db:	NVD	id:	CVE-2026-5204	date:	2026-03-31T16:16:35.973