CVE-2022-28082

Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList

published May 4, 2022

CVSS
—
EPSS
9%
Percentile
95.2
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow is lurking in the Tenda AX12 firmware! This vulnerability allows an attacker to exploit the system through the list parameter at /goform/SetNetControlList. 🌐 Think of it like a crowded elevator—if too many people try to squeeze in, it can lead to a catastrophic halt. Similarly, this stack overflow can cause the system to crash under pressure, leaving it open to all sorts of issues. An attacker could potentially crash the Tenda AX12 router, disrupting the network for all connected devices. While it’s not being actively exploited yet, if left unchecked, it could lead to more severe vulnerabilities that compromise the entire network.

Put simply

Think of it like a crowded elevator—if too many people try to squeeze in, it can lead to a catastrophic halt. Similarly, this stack overflow can cause the system to crash under pressure, leaving it open to all sorts of issues. This vulnerability arises from a stack overflow due to improper handling of the list parameter, allowing an attacker to manipulate the system's memory. If triggered, this could destabilize the device's operation.

What to do

An attacker could potentially crash the Tenda AX12 router, disrupting the network for all connected devices. While it’s not being actively exploited yet, if left unchecked, it could lead to more severe vulnerabilities that compromise the entire network. To protect your network, update the Tenda AX12 to the latest firmware version as soon as it becomes available. Regularly check for updates and consider implementing network segmentation to limit potential exposure. You’ve got this! Keep your devices up-to-date and your network secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08894 · 95.2th percentile
Published
2022-05-04T13:09Z
EPSS history
Timeline
  • 04 MAY 13:09Z
    Tenda AX12 v22.03.01.21_CN was discovered to contain a stack overflow via the list parameter at /goform/SetNetControlList
    cvelistv5