Buffer Overflow Vulnerability in Tenda AC21 Wireless Router

CVE-2022-40072

Summary

The Tenda AC21 Wireless Router version 16.03.08.15 is susceptible to a buffer overflow vulnerability through its HTTP daemon at the /bin/httpd path. Specifically, the vulnerability resides in the setSmartPowerManagement function, which can be exploited to execute arbitrary code by sending crafted HTTP requests. This weakness poses significant risks to the integrity and confidentiality of the network if not addressed. Users and administrators are advised to apply patches and implement recommended security practices to mitigate potential threats.

References