CVE-2022-44362

Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule

Critical · published December 2, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

🚨 A buffer overflow vulnerability is lurking in Tenda i21’s /goform/AddSysLogRule endpoint, and it could let attackers crash the system or take control! 🔥 Think of this as a crowded elevator that can only hold a certain number of people. If too many folks try to cram in at once, the elevator could break down or even let someone sneak into the control room! 🏢 If exploited, an attacker could leverage this vulnerability to execute arbitrary code, leading to total system compromise. This means they could potentially take over the device and wreak havoc, making this vulnerability absolutely devastating! 😱

Put simply

Think of this as a crowded elevator that can only hold a certain number of people. If too many folks try to cram in at once, the elevator could break down or even let someone sneak into the control room! 🏢 This buffer overflow flaw allows an attacker to send specially crafted input to the vulnerable endpoint, which can overflow the memory buffer and overwrite critical data in memory.

What to do

If exploited, an attacker could leverage this vulnerability to execute arbitrary code, leading to total system compromise. This means they could potentially take over the device and wreak havoc, making this vulnerability absolutely devastating! 😱 Update your Tenda i21 firmware to version 1.0.0.15 or later immediately. Additionally, consider implementing input validation to prevent such buffer overflow attacks from occurring in the future. 🛡️ You’ve got this! Taking these steps will help secure your devices against this critical vulnerability. 💪✨

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00973 · 61.7th percentile
Published
2022-12-02T00:00Z
EPSS history
Timeline
  • 02 DEC 00:00Z
    Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/AddSysLogRule
    cvelistv5