CVE-2022-30472

Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat

published May 26, 2022

CVSS
—
EPSS
1%
Percentile
72.3
In the wild
Unconfirmed
What it is

⚠️ A stack-based buffer overflow is lurking in Tenda's AC18 router! It could potentially lead to some serious hiccups if left unchecked. 🔍 Imagine a poorly designed assembly line where a stampede of items causes the conveyor belt to overflow and crash — that’s your router's memory when this vulnerability is triggered! An attacker could exploit this buffer overflow, potentially causing the system to behave unpredictably or even crash. While there are no known exploits yet, the possibility of a future attack could lead to unauthorized access to sensitive data or control over network traffic. Yikes!

Put simply

Imagine a poorly designed assembly line where a stampede of items causes the conveyor belt to overflow and crash — that’s your router's memory when this vulnerability is triggered! This vulnerability in the 'fromAddressNat' function allows an attacker to push too much data into a memory buffer, which can overflow and lead to system instability or code execution.

What to do

An attacker could exploit this buffer overflow, potentially causing the system to behave unpredictably or even crash. While there are no known exploits yet, the possibility of a future attack could lead to unauthorized access to sensitive data or control over network traffic. Yikes! To protect your device, check for updates from Tenda and apply any patches that address this vulnerability. Additionally, ensure that any default settings are modified, and secure your network with strong passwords and firewall configurations. You've got this! Stay proactive, and you’ll keep your network safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01402 · 72.3th percentile
Published
2022-05-26T15:21Z
EPSS history
Timeline
  • 26 MAY 15:21Z
    Tenda AC Seris Router AC18_V15.03.05.19(6318) has a stack-based buffer overflow vulnerability in function fromAddressNat
    cvelistv5