CVE-2022-36585: Tenda g3 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

In Tenda G3 US_G3V3.0br_V15.11.0.6(7663)_EN_TDE, in httpd binary, the addDhcpRule function has a buffer overflow caused by sscanf.

Affected products

• Tenda g3 Firmware: version 15.11.0.6(7663) only

Published 2022-09-07. Last modified 2026-06-17.