CVE-2022-30477

Name of the Vulnerable Software and Affected Versions Tenda AC Series Router AC18 version 15.03.05.19(6318)

Description The issue is related to a stack-based buffer overflow in the httpd module of the Tenda AC Series Router AC18. This occurs when handling the "/goform/SetClientState" request. Exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For Tenda AC Series Router AC18 version 15.03.05.19(6318), as a temporary workaround, consider restricting access to the "/goform/SetClientState" request until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.