CVE-2022-38314

Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo

published September 7, 2022

CVSS
—
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking in the Tenda AC18 router could let mischief-makers crash your device like a surprise party when no one's home! 🎉 Think of it like a crowded elevator that can't hold any more people; once it's full, it just shuts down instead of letting anyone else in. In this case, the router’s URL parameter is the overcrowded elevator, and it can't handle the extra requests! Imagine an attacker exploiting this flaw to overload your router, causing it to crash or become unresponsive. While it’s not currently known to be actively exploited, the potential for disruption could leave your network vulnerable to further attacks. Scary stuff for everyday users!

Put simply

Think of it like a crowded elevator that can't hold any more people; once it's full, it just shuts down instead of letting anyone else in. In this case, the router’s URL parameter is the overcrowded elevator, and it can't handle the extra requests! This vulnerability is a stack overflow issue via the 'urls' parameter at /goform/saveParentControlInfo in the Tenda AC18 router, allowing an attacker to crash the router's services.

What to do

Imagine an attacker exploiting this flaw to overload your router, causing it to crash or become unresponsive. While it’s not currently known to be actively exploited, the potential for disruption could leave your network vulnerable to further attacks. Scary stuff for everyday users! To protect your network, update your Tenda AC18 router to the latest firmware version available. If you’re unsure, check the vendor’s website for announcements and instructions on how to patch. Regularly monitoring your devices for updates is always a good practice! You've got this! Stay vigilant with updates, and your network will be safe in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01128 · 66.1th percentile
Published
2022-09-07T18:40Z
EPSS history
Timeline
  • 07 SEP 18:40Z
    Tenda AC18 router v15.03.05.19 and v15.03.05.05 was discovered to contain a stack overflow via the urls parameter at /goform/saveParentControlInfo
    cvelistv5