Stack Overflow Vulnerability in Tenda AX12 Router

CVE-2022-28082

Summary

A stack overflow vulnerability has been identified in the Tenda AX12 Router, specifically affecting version v22.03.01.21_CN. This issue arises from improper handling of the 'list' parameter in the /goform/SetNetControlList endpoint, which could be exploited by malicious actors to execute arbitrary code or cause a denial of service. It is crucial for users and administrators to apply appropriate security measures to safeguard their devices against potential attacks that exploit this vulnerability.

References