CVE-2022-44178

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow

Critical · published November 21, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

🔥 Hold onto your router, folks! A buffer overflow vulnerability in Tenda AC18 (V15.03.05.19) could let attackers execute arbitrary code easily! Think of it like an overstuffed suitcase bursting open at the airport — one small miscalculation can open the floodgates for chaos. In this case, the function formWifiWpsOOB is the culprit that allows excessive data to overflow and wreak havoc. An attacker could exploit this vulnerability to take complete control of your device, potentially leading to unauthorized access to your network and sensitive data. This could be absolutely devastating if they decide to manipulate your network settings or even disrupt your internet service!

Put simply

Think of it like an overstuffed suitcase bursting open at the airport — one small miscalculation can open the floodgates for chaos. In this case, the function formWifiWpsOOB is the culprit that allows excessive data to overflow and wreak havoc. This buffer overflow occurs in the function formWifiWpsOOB, allowing an attacker to send carefully crafted input that exceeds expected limits, leading to code execution.

What to do

An attacker could exploit this vulnerability to take complete control of your device, potentially leading to unauthorized access to your network and sensitive data. This could be absolutely devastating if they decide to manipulate your network settings or even disrupt your internet service! To secure your Tenda AC18, patch it immediately to version V15.03.05.20 or higher. Additionally, consider disabling WPS features if they aren't necessary for your network. Regularly check for firmware updates to stay ahead of vulnerabilities! You've got this! Follow these steps, and you'll be well on your way to locking down your device! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00727 · 53.7th percentile
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow
    cvelistv5