CVE-2022-44171

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set

Critical ยท published November 21, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

๐Ÿšจ A buffer overflow in Tenda AC18 could let an attacker make themselves at home with full access to your network! ๐Ÿ”ฅ Think of this as a delivery service that mislabels packages and ends up delivering a whole truckload of items instead of just one โ€” a single overflow lets the attacker commandeer everything! With this vulnerability, an attacker can exploit the overflow to execute arbitrary code, potentially accessing sensitive information or taking full control of your device. This could lead to a massive breach, exposing your entire home network to malicious actions โ€” absolutely devastating!

Put simply

Think of this as a delivery service that mislabels packages and ends up delivering a whole truckload of items instead of just one โ€” a single overflow lets the attacker commandeer everything! This buffer overflow occurs in the function form_fast_setting_wifi_set, allowing an attacker to push more data than the buffer can handle, which can lead to unexpected behavior and execution of malicious code.

What to do

With this vulnerability, an attacker can exploit the overflow to execute arbitrary code, potentially accessing sensitive information or taking full control of your device. This could lead to a massive breach, exposing your entire home network to malicious actions โ€” absolutely devastating! Immediately patch your Tenda AC18 router to version V15.03.05.20 or later to close this dangerous gap. Additionally, consider changing any default credentials and regularly check for firmware updates to keep your device secure. ๐Ÿ›ก๏ธ You've got this! With these steps, you can ensure your network is safe and sound. ๐Ÿ”’โœจ

The record
Technical detail
CVSS v3.1
9.8 ยท CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00727 ยท 53.6th percentile
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function form_fast_setting_wifi_set
    cvelistv5