CVE-2022-34597

Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting

published July 6, 2022

CVSS
—
EPSS
2%
Percentile
83.5
In the wild
Unconfirmed
What it is

⚠️ A crafty command injection vulnerability lurks in Tenda AX1806's WanParameterSetting function! It's like having a guest at your party who can reach into your kitchen without a single check. 😱 Think of this vulnerability like giving an uninvited guest access to your kitchen while you’re busy chatting in the living room. They could whip up whatever they want without anyone noticing! If exploited, an attacker could potentially execute arbitrary commands on the device, leading to unauthorized access or manipulation of settings. Yikes! This could compromise your network security and leave you vulnerable to further attacks.

Put simply

Think of this vulnerability like giving an uninvited guest access to your kitchen while you’re busy chatting in the living room. They could whip up whatever they want without anyone noticing! This command injection vulnerability allows attackers to manipulate the WanParameterSetting function, enabling them to execute commands on the Tenda AX1806 router without authorization.

What to do

If exploited, an attacker could potentially execute arbitrary commands on the device, leading to unauthorized access or manipulation of settings. Yikes! This could compromise your network security and leave you vulnerable to further attacks. To mitigate this vulnerability, ensure that your Tenda AX1806 firmware is updated to the latest version available. Regularly check for updates and consider disabling unnecessary features when not in use to minimize risk. You've got this! Stay vigilant, and your network will be safe in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02346 · 83.5th percentile
Published
2022-07-06T17:00Z
EPSS history
Timeline
  • 06 JUL 17:00Z
    Tenda AX1806 v1.0.0.1 was discovered to contain a command injection vulnerability via the function WanParameterSetting
    cvelistv5