CVE-2022-37809

Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

⚠️ A stack overflow lurking in the Tenda AC1206 router could lead to unexpected behaviors, like a surprise guest at your dinner party! 🎉 Think of it like a restaurant that tries to fit too many orders into the kitchen at once; when the stack gets overloaded, things can get messy, and you might end up with a ruined meal—or in this case, a compromised device! An attacker could exploit this vulnerability to crash the router or potentially execute arbitrary code, causing disruptions in your network and leaving you without internet access. While it hasn't been widely exploited yet, the implications could turn your reliable router into a ticking time bomb!

Put simply

Think of it like a restaurant that tries to fit too many orders into the kitchen at once; when the stack gets overloaded, things can get messy, and you might end up with a ruined meal—or in this case, a compromised device! This vulnerability arises from a stack overflow in the function formSetSpeedWan due to improper handling of the speed_dir parameter, allowing for potential code execution or system crashes.

What to do

An attacker could exploit this vulnerability to crash the router or potentially execute arbitrary code, causing disruptions in your network and leaving you without internet access. While it hasn't been widely exploited yet, the implications could turn your reliable router into a ticking time bomb! To mitigate this risk, update your Tenda AC1206 router to the latest firmware version as soon as it becomes available. In the meantime, consider changing your router settings to limit external access and monitor for any unusual activity. You've got this! With these steps, you'll enhance your router's defenses and stay ahead of potential issues. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2022-08-25T14:06Z
EPSS history
Timeline
  • 25 AUG 14:06Z
    Tenda AC1206 V15.03.06.23 was discovered to contain a stack overflow via the speed_dir parameter in the function formSetSpeedWan
    cvelistv5