PT-2022-25584 · Tenda · Tenda W20E

Published 2022-09-23 · Updated 2022-09-28 · CVE-2022-40855

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Tenda W20E router version 15.11.0.6

Description The issue is related to a stack overflow in the formSetPortMapping function, which can be triggered by a POST request to the "goform/setPortMapping/" endpoint. This allows attackers to potentially cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE) by manipulating the portMappingServer, portMappingProtocol, portMappingWan, portMappingInternal, and portMappingExternal parameters.

Recommendations For Tenda W20E router version 15.11.0.6, consider disabling the formSetPortMapping function or restricting access to the "goform/setPortMapping/" endpoint until a patch is available. Additionally, avoid using the portMappingServer, portMappingProtocol, portMappingWan, portMappingInternal, and portMappingExternal parameters in the affected endpoint to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-40855

Affected Products

Tenda W20E

References · 3

• 🔥 https://github.com/CPSeek/Router-vuls/blob/main/Tenda/W20E/formSetPortMapping.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-40855 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40855 · Vendor Advisory