CVE-2022-38311

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet

published September 7, 2022

CVSS
β€”
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow in Tenda AC18 routers could leave your device vulnerable! πŸŽ‰ Think of it as a coffee machine that overfills when you set the timer too long β€” it spills everywhere and becomes unusable. In this case, the router's firmware gets overwhelmed, leading to potential system crashes or other unexpected behavior. An attacker could exploit this overflow to disrupt service or potentially gain unauthorized access to the router. While there's no known exploitation yet, it's absolutely vital to secure your network and prevent potential future mischief!

Put simply

Think of it as a coffee machine that overfills when you set the timer too long β€” it spills everywhere and becomes unusable. In this case, the router's firmware gets overwhelmed, leading to potential system crashes or other unexpected behavior. This vulnerability occurs due to insufficient validation of the 'time' parameter in the PowerSaveSet function, leading to a stack overflow that could crash the system or allow code execution.

What to do

An attacker could exploit this overflow to disrupt service or potentially gain unauthorized access to the router. While there's no known exploitation yet, it's absolutely vital to secure your network and prevent potential future mischief! Check your Tenda AC18 router model and ensure it’s updated to the latest firmware version. Currently, no patches have been issued specifically for this vulnerability, but regularly check for updates and apply them immediately when available. πŸ”„ You've got this! Stay proactive about your router's security, and you'll keep your network safe. πŸ›‘οΈ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01128 Β· 66.1th percentile
Published
2022-09-07T18:41Z
EPSS history
Timeline
  • 07 SEP 18:41Z
    Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the time parameter at /goform/PowerSaveSet
    cvelistv5