CVE-2022-44180

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter

Critical · published November 21, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
53.7
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in Tenda AC18 could let attackers take complete control of your device! Think of it like a coffee machine that overflows when too much water is added, spilling everywhere and short-circuiting the entire kitchen. This vulnerability allows an attacker to send a malformed input that forces the device to overflow its memory, leading to chaos! If exploited, this critical vulnerability could allow an attacker to execute arbitrary code on your router, compromising your entire network. They could manipulate settings, siphon off sensitive data, and even create backdoors for future access. It’s a tech nightmare waiting to happen!

Put simply

Think of it like a coffee machine that overflows when too much water is added, spilling everywhere and short-circuiting the entire kitchen. This vulnerability allows an attacker to send a malformed input that forces the device to overflow its memory, leading to chaos! The vulnerability arises from the `addWifiMacFilter` function in Tenda AC18 V15.03.05.19, which lacks proper bounds checking, enabling attackers to overwrite memory and execute any code they desire.

What to do

If exploited, this critical vulnerability could allow an attacker to execute arbitrary code on your router, compromising your entire network. They could manipulate settings, siphon off sensitive data, and even create backdoors for future access. It’s a tech nightmare waiting to happen! To mitigate this risk, immediately update your Tenda AC18 to the latest firmware version provided by Tenda. Regularly check for updates and consider disabling any remote management features that may expose your device to unauthorized access. 🛡️ You've got this! Follow these steps, and you’ll lock down your network in no time! 🚀

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00727 · 53.7th percentile
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function addWifiMacFilter
    cvelistv5