CVE-2022-37803

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat

published August 25, 2022

CVSS
โ€”
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

โš ๏ธ A crafty stack overflow just found its way into the Tenda AC1206! This vulnerability sneaks in through the page parameter, making it a surprisingly sneaky flaw. ๐Ÿ” Think of it as a poorly stacked set of boxes in a delivery truck. If one box is too heavy, it can cause a domino effect, potentially overwhelming the entire load and leading to a complete mess on the road. If exploited, this stack overflow could allow an attacker to crash the device or potentially execute malicious code, resulting in loss of functionality or control over the device. While no active exploits exist yet, the potential for chaos is still there!

Put simply

Think of it as a poorly stacked set of boxes in a delivery truck. If one box is too heavy, it can cause a domino effect, potentially overwhelming the entire load and leading to a complete mess on the road. This vulnerability stems from insufficient bounds checking in the function fromAddressNat when processing the page parameter, leading to a stack overflow that could be triggered by a specially crafted request.

What to do

If exploited, this stack overflow could allow an attacker to crash the device or potentially execute malicious code, resulting in loss of functionality or control over the device. While no active exploits exist yet, the potential for chaos is still there! To mitigate this risk, users should update their Tenda AC1206 router firmware to the latest version as soon as it becomes available. Regularly check for updates to keep your device secure from unexpected issues. You've got this! Stay vigilant and keep your devices updated for a safe internet experience. ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 ยท 67.9th percentile
Published
2022-08-25T14:04Z
EPSS history
Timeline
  • 25 AUG 14:04Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the page parameter in the function fromAddressNat
    cvelistv5