CVE-2022-30476

Name of the Vulnerable Software and Affected Versions Tenda AC Series Router version AC18 V15.03.05.19(6318)

Description The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router when handling the /goform/SetFirewallCfg request. This can potentially allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For version AC18 V15.03.05.19(6318), as a temporary workaround, consider restricting access to the /goform/SetFirewallCfg request in the httpd module until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.