Buffer Overflow Vulnerability in Tenda AC15 and AC18 WiFi Routers

CVE-2022-38325

Summary

The Tenda AC15 and AC18 WiFi routers suffer from a buffer overflow vulnerability that can be exploited via the filePath parameter in the /goform/expandDlnaFile endpoint. This flaw may allow attackers to manipulate memory, potentially leading to unauthorized access or disruption of the router's functionality. It is crucial for users to apply any available patches and implement security best practices to safeguard their devices from potential exploitation.

References