Stack Overflow Vulnerability in Tenda W30E Router

CVE-2022-45518

Summary

The Tenda W30E router, specifically version V1.0.1.25(633), is susceptible to a stack overflow vulnerability that can be exploited through the 'page' parameter in the '/goform/SetIpBind' endpoint. By sending a crafted request, an attacker may execute arbitrary code, potentially compromising the device's functionality and security. Users are advised to review this vulnerability closely and implement necessary security measures to protect their devices.

References