CVE-2022-44183

Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic

Critical · published November 21, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
65.2
In the wild
Unconfirmed
What it is

🔥 A buffer overflow vulnerability in the Tenda AC18 could let an attacker take control of your router with just one crafty request! Think of this like a crowded restaurant where a waiter misplaces an entire order, causing the kitchen to overflow with unintended dishes. In this case, the router is the kitchen, and the overflow could lead to undetected chaos! An attacker could exploit this vulnerability to execute arbitrary code on the router, effectively allowing them to manipulate network traffic. This could mean intercepting your data, redirecting web traffic, or even launching attacks against other devices on your network. 🎭 It's a significant risk that could leave your entire home network wide open!

Put simply

Think of this like a crowded restaurant where a waiter misplaces an entire order, causing the kitchen to overflow with unintended dishes. In this case, the router is the kitchen, and the overflow could lead to undetected chaos! This buffer overflow vulnerability arises in the function formSetWifiGuestBasic, allowing attackers to send oversized inputs that disrupt normal operation and execute malicious code.

What to do

An attacker could exploit this vulnerability to execute arbitrary code on the router, effectively allowing them to manipulate network traffic. This could mean intercepting your data, redirecting web traffic, or even launching attacks against other devices on your network. 🎭 It's a significant risk that could leave your entire home network wide open! Update your Tenda AC18 to the latest firmware version V15.03.05.20 or later to protect against this vulnerability. Additionally, consider regularly auditing your router's settings and user permissions to ensure they are secure. 🛡️ You've got this! Follow these steps to keep your network safe and sound! 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01092 · 65.2th percentile
Published
2022-11-21T00:00Z
EPSS history
Timeline
  • 21 NOV 00:00Z
    Tenda AC18 V15.03.05.19 is vulnerable to Buffer Overflow via function formSetWifiGuestBasic
    cvelistv5