CVE-2022-38314

Name of the Vulnerable Software and Affected Versions Tenda AC18 router versions 15.03.05.05 through 15.03.05.19

Description A stack overflow issue was discovered, affecting the Tenda AC18 router. The issue occurs via the urls parameter at the "/goform/saveParentControlInfo" API endpoint.

Recommendations For versions 15.03.05.05 through 15.03.05.19, consider disabling access to the "/goform/saveParentControlInfo" API endpoint until a patch is available. As a temporary workaround, avoid using the urls parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.