CVE-2022-37808

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A sneaky stack overflow lurks in the Tenda AC1206 router! An attacker can exploit the index parameter in the formWifiWpsOOB function — a simple yet effective entry point! Think of this like an overstuffed suitcase that bursts open during travel. If you pack too much into a single compartment, the contents spill out, and everything becomes chaotic! This stack overflow could lead to unexpected behavior or even a crash of the router, making your network vulnerable. An attacker could potentially manipulate the router through this flaw, disrupting your secure connection and leaving your home network exposed!

Put simply

Think of this like an overstuffed suitcase that bursts open during travel. If you pack too much into a single compartment, the contents spill out, and everything becomes chaotic! The vulnerability results from improper handling of the index parameter in the formWifiWpsOOB function, allowing for a stack overflow to occur when excessive data is processed. This can lead to application crashes or exploit attempts that take advantage of the overflow.

What to do

This stack overflow could lead to unexpected behavior or even a crash of the router, making your network vulnerable. An attacker could potentially manipulate the router through this flaw, disrupting your secure connection and leaving your home network exposed! To protect yourself, update the Tenda AC1206 firmware to the latest version available. Ensure regular monitoring of your router settings and audit connected devices for any unusual behavior. You've got this! Stay proactive and secure your network today! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2022-08-25T14:06Z
EPSS history
Timeline
  • 25 AUG 14:06Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the index parameter in the function formWifiWpsOOB
    cvelistv5