CVE-2022-40864

Name of the Vulnerable Software and Affected Versions Tenda AC15 and AC18 routers version V15.03.05.19

Description The issue concerns a stack overflow vulnerability in the setSmartPowerManagement function, which is triggered by the request "/goform/PowerSaveSet".

Recommendations For Tenda AC15 and AC18 routers version V15.03.05.19, as a temporary workaround, consider disabling the setSmartPowerManagement function until a patch is available. Restrict access to the "/goform/PowerSaveSet" endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.