CVE-2022-30477: Buffer Overflow

Published May 26, 2022

Updated

Tenda AC Series Router AC18V15.03.05.19(6318) was discovered to contain a stack-based buffer overflow in the httpd module when handling /goform/SetClientState request.

Affected Software

2 affected components

Tenda Ac18 Firmware=15.03.05.19\(6318\)

Tenda Ac18

Event History

May 26, 2022

CVE Published

via MITRE·03:26 PM

Data Sourced

via MITRE·03:26 PM

Description

Frequently Asked Questions

What is the vulnerability ID for this Tenda AC Series Router issue?

The vulnerability ID for this Tenda AC Series Router issue is CVE-2022-30477.

What is the severity of CVE-2022-30477?

The severity of CVE-2022-30477 is critical with a severity value of 9.8.

What is affected by CVE-2022-30477?

The Tenda AC Series Router AC18_V15.03.05.19(6318) firmware is affected by CVE-2022-30477.

What is the description of CVE-2022-30477?

CVE-2022-30477 is a stack-based buffer overflow vulnerability in the httpd module of the Tenda AC Series Router AC18_V15.03.05.19(6318) firmware when handling /goform/SetClientState request.

Is Tenda AC18 router vulnerable to CVE-2022-30477?

No, the Tenda AC18 router is not vulnerable to CVE-2022-30477.

How can I fix CVE-2022-30477?

To fix CVE-2022-30477, it is recommended to update the firmware of the Tenda AC Series Router to a version without the vulnerability.