Stack Overflow Vulnerability in Tenda W20E Router

CVE-2022-48130

Summary

The Tenda W20E router, specifically version 15.11.0.6, is subjected to vulnerabilities that allow multiple stack overflow conditions. These vulnerabilities arise from improper handling of user input in the formSetStaticRoute function. Malicious actors can exploit parameters such as staticRouteNet, staticRouteMask, staticRouteGateway, and staticRouteWAN, potentially leading to unauthorized code execution or system crashes. Users of the Tenda W20E should ensure they are aware of these security risks and apply any necessary updates to mitigate possible threats.

References