CVE-2022-30472

Name of the Vulnerable Software and Affected Versions Tenda AC18 versions prior to V15.03.05.19(6318)

Description The issue is related to a stack-based buffer overflow vulnerability in the fromAddressNat() function of the Tenda AC18 router's firmware. This vulnerability occurs when handling the entrys and mitInterface parameters, allowing an attacker to potentially cause a denial of service or execute arbitrary code remotely.

Recommendations For Tenda AC18 versions prior to V15.03.05.19(6318), as a temporary workaround, consider disabling the fromAddressNat() function until a patch is available. Restrict access to the vulnerable function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.