CVE-2022-38310

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg

published September 7, 2022

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

⚠️ A surprising stack overflow lurks in Tenda AC18 routers! The list parameter at /goform/SetStaticRouteCfg can overflow, leading to potential security issues. 🔥 Think of this as a library where the librarian doesn't check how many books you’re trying to return at once. If you overload the return slot, it could jam and spill chaos all over the floor! If exploited, this vulnerability could allow an attacker to crash the router or execute arbitrary code, compromising your entire network. Imagine a situation where your internet goes down unexpectedly, or worse, someone gains control of your network!

Put simply

Think of this as a library where the librarian doesn't check how many books you’re trying to return at once. If you overload the return slot, it could jam and spill chaos all over the floor! The flaw arises from a stack overflow in the list parameter at the SetStaticRouteCfg endpoint, which can be triggered by sending an excessive amount of data. This could potentially lead to memory corruption and control over the device.

What to do

If exploited, this vulnerability could allow an attacker to crash the router or execute arbitrary code, compromising your entire network. Imagine a situation where your internet goes down unexpectedly, or worse, someone gains control of your network! To mitigate this, patch your Tenda AC18 router to the latest firmware available. If you’re unsure about the version, check the manufacturer's website regularly for updates. 🛡️ You've got this! With a quick firmware update, you can secure your network and maintain your status as a security hero! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01128 · 66.1th percentile
Published
2022-09-07T18:41Z
EPSS history
Timeline
  • 07 SEP 18:41Z
    Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the list parameter at /goform/SetStaticRouteCfg
    cvelistv5