Stack Overflow Vulnerability in Tenda W30E Router

CVE-2022-45524

Summary

The Tenda W30E router version V1.0.1.25(633) is affected by a stack overflow vulnerability in the handling of the 'opttype' parameter via the /goform/IPSECsave endpoint. This vulnerability could be exploited by an attacker to gain unauthorized access to the router's functionalities, potentially allowing for remote code execution or denial of service. Users are advised to review their device configurations and implement necessary mitigations to prevent exploitation.

References