Stack Overflow Vulnerability in Tenda Routers G1 and G3

CVE-2022-24172

Summary

A stack overflow vulnerability has been identified in Tenda routers G1 and G3. Specifically, this issue resides in the function formAddDhcpBindRule, where the addDhcpRules parameter can be exploited by attackers to trigger a Denial of Service (DoS). This flaw can render the affected devices unresponsive, compromising the integrity and availability of network services for users. It is crucial for users of the affected router models to apply appropriate security measures to mitigate potential risks.

References