CVE-2022-37804

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow could be hiding in your Tenda AC1206! The time parameter in the function saveParentControlInfo is your potential villain here. 🤖 Imagine your favorite restaurant suddenly runs out of space on their order pad—the chef might start mixing up orders or lose track of what’s being made. A stack overflow does just that, causing the system to mismanage data and potentially crash! An attacker could exploit this vulnerability to crash the device or cause it to behave unpredictably. While it’s not marked as actively exploited, the consequences could still lead to device instability and disruptions in your home network.

Put simply

Imagine your favorite restaurant suddenly runs out of space on their order pad—the chef might start mixing up orders or lose track of what’s being made. A stack overflow does just that, causing the system to mismanage data and potentially crash! This stack overflow vulnerability occurs in the Tenda AC1206 when the time parameter is processed in the saveParentControlInfo function, allowing attackers to surpass memory limits and potentially execute arbitrary code.

What to do

An attacker could exploit this vulnerability to crash the device or cause it to behave unpredictably. While it’s not marked as actively exploited, the consequences could still lead to device instability and disruptions in your home network. To protect your router, check for any firmware updates from Tenda and apply them immediately. Regularly monitor your device settings and be vigilant about unauthorized changes to parental controls. You've got this! Keep your network safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2022-08-25T14:04Z
EPSS history
Timeline
  • 25 AUG 14:04Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo
    cvelistv5