CVE-2022-44175

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg

Critical · published November 21, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
56.3
In the wild
Unconfirmed
What it is

🚨 A single function call could unravel your network security! The Tenda AC18's formSetMacFilterCfg feature has a buffer overflow vulnerability that packs a punch. 🔥 Think of it as a restaurant where the chef overfills a dish—if too much is added, it spills over and makes a mess everywhere! In this case, that mess allows an attacker to overtake your device's functionality. An attacker could exploit this vulnerability to gain unauthorized access to your router, potentially leading to full control of your network. This means they could intercept data, launch further attacks on connected devices, or even shut down your connectivity. The stakes are high! ⚡

Put simply

Think of it as a restaurant where the chef overfills a dish—if too much is added, it spills over and makes a mess everywhere! In this case, that mess allows an attacker to overtake your device's functionality. This buffer overflow vulnerability in the Tenda AC18 occurs through the formSetMacFilterCfg function, allowing attackers to manipulate memory allocation and execute arbitrary code on the device.

What to do

An attacker could exploit this vulnerability to gain unauthorized access to your router, potentially leading to full control of your network. This means they could intercept data, launch further attacks on connected devices, or even shut down your connectivity. The stakes are high! ⚡ Immediately patch your Tenda AC18 to version V15.03.05.20 or later, as this release fixes the vulnerability. Also, review your router's settings and consider implementing additional firewall rules. Don't leave your network vulnerable! You've got this! By taking these steps, you’ll restore security and keep your network safe! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00805 · 56.3th percentile
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetMacFilterCfg
    cvelistv5