CVE-2022-37800

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow could be lurking in your Tenda AC1206 router! This bug sneaks in through the ‘list’ parameter in the fromSetRouteStatic function. 🔍 Think of this like a waiter who keeps bringing out more and more dishes for an order that never existed, overwhelming the kitchen until everything crashes under the weight of excess. 🍽️ If exploited, this vulnerability could lead to a denial of service, causing your router to freeze up and cease functioning. That means no internet access, which could be absolutely devastating during crucial online moments!

Put simply

Think of this like a waiter who keeps bringing out more and more dishes for an order that never existed, overwhelming the kitchen until everything crashes under the weight of excess. 🍽️ The stack overflow in Tenda AC1206 V15.03.06.23 occurs when the 'list' parameter is processed in the fromSetRouteStatic function, allowing excess data to overflow and potentially crash the router.

What to do

If exploited, this vulnerability could lead to a denial of service, causing your router to freeze up and cease functioning. That means no internet access, which could be absolutely devastating during crucial online moments! To mitigate this, ensure you update your Tenda AC1206 to the latest firmware that addresses this issue. Regularly check the manufacturer’s website for updates and apply them as soon as possible! You've got this! With these steps, you’ll keep your router safe and sound. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2022-08-25T14:04Z
EPSS history
Timeline
  • 25 AUG 14:04Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the list parameter at the function fromSetRouteStatic
    cvelistv5